diff --git a/hosts/common/programs/strings.nix b/hosts/common/programs/strings.nix
index 332a5f64..824560f2 100644
--- a/hosts/common/programs/strings.nix
+++ b/hosts/common/programs/strings.nix
@@ -6,7 +6,7 @@
     packageUnwrapped = pkgs.linkIntoOwnPackage pkgs.binutils-unwrapped "bin/strings";
 
     sandbox.method = "landlock";
-    sandbox.wrapperType = "wrappedDerivation";
+    sandbox.wrapperType = "inplace";
     sandbox.autodetectCliPaths = "existing";
   };
 }
diff --git a/pkgs/additional/trivial-builders/default.nix b/pkgs/additional/trivial-builders/default.nix
index f7e69723..9cfeb608 100644
--- a/pkgs/additional/trivial-builders/default.nix
+++ b/pkgs/additional/trivial-builders/default.nix
@@ -12,6 +12,7 @@
   } ''
     mkdir -p "$out/$(dirname "$item")"
     cp -a "$fromPkg/$item" "$out/$item"
+    runHook postFixup
   '';
 
   linkIntoOwnPackage = pkg: path: runCommand "${pkg.pname or pkg.name}-${path}" {
@@ -20,6 +21,7 @@
   } ''
     mkdir -p "$out/$(dirname "$item")"
     ln -s "$fromPkg/$item" "$out/$item"
+    runHook postFixup
   '';
 
   # given some package, create a new package which symlinks every file of the original