lsof: fix sandboxing

2024-04-17 23:29:59 +00:00 · 2024-04-17 23:29:59 +00:00 · c08280589d
parent 9a9ffcbea9
commit c08280589d
1 changed files with 1 additions and 0 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@ -618,6 +618,7 @@ in
    losslesscut-bin.sandbox.whitelistX = true;

    lsof.sandbox.method = "capshonly";  # lsof doesn't sandbox under bwrap or even landlock w/ full access to /
+    lsof.sandbox.capabilities = [ "dac_override" "sys_ptrace" ];

    lua = {};