curl: sandbox
This commit is contained in:
@@ -39,6 +39,7 @@ in
|
|||||||
"btrfs-progs"
|
"btrfs-progs"
|
||||||
"cacert.unbundled" # some services require unbundled /etc/ssl/certs
|
"cacert.unbundled" # some services require unbundled /etc/ssl/certs
|
||||||
"cryptsetup"
|
"cryptsetup"
|
||||||
|
"curl"
|
||||||
"ddrescue"
|
"ddrescue"
|
||||||
"dig"
|
"dig"
|
||||||
"dtc" # device tree [de]compiler
|
"dtc" # device tree [de]compiler
|
||||||
|
8
hosts/common/programs/curl.nix
Normal file
8
hosts/common/programs/curl.nix
Normal file
@@ -0,0 +1,8 @@
|
|||||||
|
{ ... }:
|
||||||
|
{
|
||||||
|
sane.programs.curl = {
|
||||||
|
sandbox.method = "bwrap";
|
||||||
|
sandbox.net = "all";
|
||||||
|
sandbox.autodetectCliPaths = "parent"; #< for `-o` option
|
||||||
|
};
|
||||||
|
}
|
@@ -26,6 +26,7 @@
|
|||||||
./conky
|
./conky
|
||||||
./cozy.nix
|
./cozy.nix
|
||||||
./cups.nix
|
./cups.nix
|
||||||
|
./curl.nix
|
||||||
./curlftpfs.nix
|
./curlftpfs.nix
|
||||||
./dbus.nix
|
./dbus.nix
|
||||||
./dconf.nix
|
./dconf.nix
|
||||||
|
Reference in New Issue
Block a user