lsof: fix sandboxing

This commit is contained in:
2024-04-17 23:29:59 +00:00
parent 9a9ffcbea9
commit c08280589d

View File

@@ -618,6 +618,7 @@ in
losslesscut-bin.sandbox.whitelistX = true;
lsof.sandbox.method = "capshonly"; # lsof doesn't sandbox under bwrap or even landlock w/ full access to /
lsof.sandbox.capabilities = [ "dac_override" "sys_ptrace" ];
lua = {};