unzip: sandbox with bunpen
This commit is contained in:
@@ -1211,7 +1211,7 @@ in
|
||||
|
||||
util-linux.sandbox.enable = false; #< TODO: possible to sandbox if i specify a different profile for each of its ~50 binaries
|
||||
|
||||
unzip.sandbox.method = "bwrap";
|
||||
unzip.sandbox.method = "bunpen";
|
||||
unzip.sandbox.autodetectCliPaths = "existingOrParent";
|
||||
unzip.sandbox.whitelistPwd = true;
|
||||
|
||||
|
Reference in New Issue
Block a user