diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index c30526ee8..5a03fdeb2 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -930,7 +930,7 @@ in
     nixd.sandbox.method = "bunpen";
     nixd.sandbox.whitelistPwd = true;
 
-    nixfmt-rfc-style.sandbox.method = "bwrap";
+    nixfmt-rfc-style.sandbox.method = "bunpen";
     nixfmt-rfc-style.sandbox.autodetectCliPaths = "existingDirOrParent";  #< it formats via rename
 
     nixpkgs-review.sandbox.method = "bwrap";