mmcli: sandbox

hosts/common/net/modemmanager.nix

@@ -14,7 +14,7 @@
     # after = [ "polkit.service" ];
     # requires = [ "polkit.service" ];
     wantedBy = [ "network.target" ];  #< default is `multi-user.target`, somehow it doesn't auto-start with that...
-    # path = [ "/run/current-system/sw" ];  #< so it can find `sanebox`
+    path = [ "/run/current-system/sw" ];  #< so it can find `sanebox`
 
     # serviceConfig.Type = "dbus";
     # serviceConfig.BusName = "org.freedesktop.ModemManager1";

hosts/common/programs/mmcli.nix

@@ -22,11 +22,11 @@
         mainProgram = "mmcli";
       };
     });
-    # TODO: sandbox! somehow doing this breaks ModemManager.service
-    # sandbox.method = "bwrap";
-    # sandbox.whitelistDbus = [
-    #   "system"
-    # ];
+
+    sandbox.method = "bwrap";
+    sandbox.whitelistDbus = [
+      "system"
+    ];
   };
 }