programs: gnome-maps: sandbox

This commit is contained in:
Colin 2024-02-25 11:51:50 +00:00
parent 2ad33a49df
commit c304367e21

View File

@ -1,13 +1,16 @@
{ ... }: { ... }:
{ {
sane.programs."gnome.gnome-maps" = { sane.programs."gnome.gnome-maps" = {
# TODO: verify location services sandbox.method = "bwrap";
# sandbox.method = "bwrap"; sandbox.wrapperType = "inplace"; #< dbus files
# sandbox.wrapperType = "inplace"; sandbox.whitelistDri = true; # for perf
# sandbox.whitelistDri = true; # for perf sandbox.whitelistDbus = [
# sandbox.whitelistDbus = [ "user" ]; # for GPS (geoclue, portals) "system" # system is required for non-portal location services
# sandbox.whitelistWayland = true; "user" #< not sure if "user" is necessary?
# sandbox.net = "clearnet"; ];
sandbox.whitelistWayland = true;
sandbox.net = "clearnet";
sandbox.usePortal = false; # TODO: set up portal-based location services
persist.byStore.plaintext = [ ".cache/shumate" ]; persist.byStore.plaintext = [ ".cache/shumate" ];
persist.byStore.private = [ persist.byStore.private = [