btrfs-progs: fix sandboxing

2024-09-21 01:56:56 +00:00
parent e9d3623a97
commit b105e774b3
1 changed files with 3 additions and 0 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -444,6 +444,9 @@ in

    btrfs-progs.sandbox.method = "bunpen";  #< bwrap, landlock: both work
    btrfs-progs.sandbox.autodetectCliPaths = "existing";  # e.g. `btrfs filesystem df /my/fs`
+    btrfs-progs.sandbox.extraPaths = [
+      "/dev/btrfs-control"
+    ];

    "cacert.unbundled".sandbox.enable = false;  #< data only