diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index d861401e..b60490d8 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -224,6 +224,14 @@ in
     blanket.sandbox.method = "bwrap";
     blanket.sandbox.wrapperType = "wrappedDerivation";
 
+    brightnessctl.sandbox.method = "bwrap";
+    brightnessctl.sandbox.wrapperType = "wrappedDerivation";
+    brightnessctl.sandbox.extraPaths = [
+      "/sys/class/backlight"
+      "/sys/devices"
+    ];
+    brightnessctl.sandbox.whitelistDbus = [ "system" ];
+
     "cacert.unbundled".sandbox.enable = false;
 
     cargo.persist.byStore.plaintext = [ ".cargo" ];