From bee3ec1fa0a83824373cd7a3fb32127479df7dba Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Thu, 4 Jul 2024 22:28:02 +0000
Subject: [PATCH] wireshark: fix sandboxing when reading pcaps

---
 hosts/common/programs/wireshark.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/hosts/common/programs/wireshark.nix b/hosts/common/programs/wireshark.nix
index cb38efc6..5355a133 100644
--- a/hosts/common/programs/wireshark.nix
+++ b/hosts/common/programs/wireshark.nix
@@ -5,6 +5,7 @@ in
 {
   sane.programs.wireshark = {
     sandbox.method = "landlock";
+    sandbox.autodetectCliPaths = "existingFile";  #< for loading pcap files on CLI
     sandbox.whitelistWayland = true;
     sandbox.net = "all";
     sandbox.capabilities = [ "net_admin" "net_raw" ];