programs: gnome-frog: sandbox
This commit is contained in:
parent
7d1fd2f30a
commit
bbf7aac062
|
@ -458,6 +458,23 @@ in
|
||||||
gnome-2048.sandbox.whitelistWayland = true;
|
gnome-2048.sandbox.whitelistWayland = true;
|
||||||
gnome-2048.persist.byStore.plaintext = [ ".local/share/gnome-2048/scores" ];
|
gnome-2048.persist.byStore.plaintext = [ ".local/share/gnome-2048/scores" ];
|
||||||
|
|
||||||
|
gnome-frog.sandbox.method = "bwrap";
|
||||||
|
gnome-frog.sandbox.wrapperType = "wrappedDerivation";
|
||||||
|
gnome-frog.sandbox.whitelistWayland = true;
|
||||||
|
gnome-frog.sandbox.whitelistDbus = [ "user" ];
|
||||||
|
gnome-frog.sandbox.extraPaths = [
|
||||||
|
# needed when processing screenshots
|
||||||
|
"/tmp"
|
||||||
|
];
|
||||||
|
gnome-frog.sandbox.extraHomePaths = [
|
||||||
|
# for OCR'ing photos from disk
|
||||||
|
"tmp"
|
||||||
|
"Pictures"
|
||||||
|
];
|
||||||
|
gnome-frog.persist.byStore.cryptClearOnBoot = [
|
||||||
|
".local/share/tessdata" # 15M; dunno what all it is.
|
||||||
|
];
|
||||||
|
|
||||||
# TODO: gnome-maps: move to own file
|
# TODO: gnome-maps: move to own file
|
||||||
"gnome.gnome-maps".persist.byStore.plaintext = [ ".cache/shumate" ];
|
"gnome.gnome-maps".persist.byStore.plaintext = [ ".cache/shumate" ];
|
||||||
"gnome.gnome-maps".persist.byStore.private = [ ".local/share/maps-places.json" ];
|
"gnome.gnome-maps".persist.byStore.private = [ ".local/share/maps-places.json" ];
|
||||||
|
|
Loading…
Reference in New Issue
Block a user