diff --git a/hosts/common/programs/gnome-maps.nix b/hosts/common/programs/gnome-maps.nix
index f5f4b7aa..1ec0397d 100644
--- a/hosts/common/programs/gnome-maps.nix
+++ b/hosts/common/programs/gnome-maps.nix
@@ -1,13 +1,16 @@
 { ... }:
 {
   sane.programs."gnome.gnome-maps" = {
-    # TODO: verify location services
-    # sandbox.method = "bwrap";
-    # sandbox.wrapperType = "inplace";
-    # sandbox.whitelistDri = true;  # for perf
-    # sandbox.whitelistDbus = [ "user" ];  # for GPS (geoclue, portals)
-    # sandbox.whitelistWayland = true;
-    # sandbox.net = "clearnet";
+    sandbox.method = "bwrap";
+    sandbox.wrapperType = "inplace";  #< dbus files
+    sandbox.whitelistDri = true;  # for perf
+    sandbox.whitelistDbus = [
+      "system"  # system is required for non-portal location services
+      "user"  #< not sure if "user" is necessary?
+    ];
+    sandbox.whitelistWayland = true;
+    sandbox.net = "clearnet";
+    sandbox.usePortal = false;  # TODO: set up portal-based location services
 
     persist.byStore.plaintext = [ ".cache/shumate" ];
     persist.byStore.private = [