tree: fix sandboxing when run as sudo

2024-10-12 22:44:06 +00:00
parent cacec52d8e
commit a753cf34ec
1 changed files with 2 additions and 0 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -1084,6 +1084,8 @@ in

    tree.sandbox.autodetectCliPaths = "existing";
    tree.sandbox.whitelistPwd = true;
+    tree.sandbox.tryKeepUsers = true;
+    tree.sandbox.capabilities = [ "dac_read_search" ];

    typescript-language-server.sandbox.whitelistPwd = true;