colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

sysctl: ship it

Browse Source
This commit is contained in:
Colin
2024-12-05 00:06:43 +00:00
parent e1c8d0d610
commit a8810d336c
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
hosts/common/programs/assorted.nix
View File

@@ -110,6 +110,7 @@ in
"tcpdump"
"tree"
"unixtools.ps"
"unixtools.sysctl"
"unixtools.xxd"
"usbutils" # lsusb
"util-linux" # lsblk, lscpu, etc
@@ -1161,6 +1162,7 @@ in
util-linux.sandbox.method = null; #< TODO: possible to sandbox if i specify a different profile for each of its ~50 binaries
"unixtools.ps".sandbox.keepPidsAndProc = true;
"unixtools.sysctl" = {}; #< XXX: probably not sandboxed correctly for sysctl writes; only for reads
unzip.sandbox.autodetectCliPaths = "existingOrParent";
unzip.sandbox.whitelistPwd = true;