networkmanager_dmenu: sandbox

2024-06-19 00:44:35 +00:00
parent 0b3156c4c7
commit c2c15e1ac3
1 changed files with 10 additions and 0 deletions
--- a/hosts/common/programs/networkmanager_dmenu/default.nix
+++ b/hosts/common/programs/networkmanager_dmenu/default.nix
@@ -2,6 +2,16 @@
 { ... }:
 {
  sane.programs.networkmanager_dmenu = {
+    sandbox.method = "bwrap";
+    sandbox.isolatePids = false;  #< so it can know that NetworkManager really is running... (?)
+    sandbox.whitelistDbus = [
+      "system"
+    ];
+    sandbox.whitelistWayland = true;
+    sandbox.extraHomePaths = [
+      ".cache/rofi"
+      ".config/rofi"
+    ];
    suggestedPrograms = [
      "pidof"
    ];