clightning-sane: sandbox

This commit is contained in:
2024-07-07 01:11:15 +00:00
parent bb3f148c32
commit b74e797b13

View File

@@ -428,7 +428,10 @@ in
clang = {}; clang = {};
clightning-sane = {}; clightning-sane.sandbox.method = "bwrap";
clightning-sane.sandbox.extraPaths = [
"/var/lib/clightning/bitcoin/lightning-rpc"
];
# cryptsetup: typical use is `cryptsetup open /dev/loopxyz mappedName`, and creates `/dev/mapper/mappedName` # cryptsetup: typical use is `cryptsetup open /dev/loopxyz mappedName`, and creates `/dev/mapper/mappedName`
cryptsetup.sandbox.method = "landlock"; cryptsetup.sandbox.method = "landlock";