From b7c1a6331d0f2dee34f7fe2c221502dfcdcc189b Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Thu, 15 Feb 2024 18:23:59 +0000
Subject: [PATCH] programs: mate.engrampa: enable sandbox

---
 hosts/common/programs/assorted.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index b8f73a80..2f22284d 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -413,6 +413,18 @@ in
     losslesscut-bin.sandbox.whitelistWayland = true;
     losslesscut-bin.sandbox.whitelistX = true;
 
+    "mate.engrampa".sandbox.method = "bwrap";  # TODO:sandbox: untested
+    "mate.engrampa".sandbox.wrapperType = "inplace";
+    "mate.engrampa".sandbox.whitelistWayland = true;
+    "mate.engrampa".sandbox.autodetectCliPaths = "existingFileOrParent";
+    "mate.engrampa".sandbox.extraHomePaths = [
+      "archive"
+      "Books"
+      "records"
+      "ref"
+      "tmp"
+    ];
+
     mercurial.sandbox.method = "bwrap";  # TODO:sandbox: untested
     mercurial.sandbox.wrapperType = "wrappedDerivation";
     mercurial.sandbox.net = "clearnet";