From b4a20da78a3ca7fb4ba0d0a3b220adeb3e8e7265 Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Tue, 13 Feb 2024 10:55:44 +0000
Subject: [PATCH] programs: brightnessctl: sandbox

---
 hosts/common/programs/assorted.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index d861401e..b60490d8 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -224,6 +224,14 @@ in
     blanket.sandbox.method = "bwrap";
     blanket.sandbox.wrapperType = "wrappedDerivation";
 
+    brightnessctl.sandbox.method = "bwrap";
+    brightnessctl.sandbox.wrapperType = "wrappedDerivation";
+    brightnessctl.sandbox.extraPaths = [
+      "/sys/class/backlight"
+      "/sys/devices"
+    ];
+    brightnessctl.sandbox.whitelistDbus = [ "system" ];
+
     "cacert.unbundled".sandbox.enable = false;
 
     cargo.persist.byStore.plaintext = [ ".cargo" ];