curl: sandbox

This commit is contained in:
2024-07-16 07:23:32 +00:00
parent 40d32ec1d5
commit c72e66a901
3 changed files with 10 additions and 0 deletions

View File

@@ -39,6 +39,7 @@ in
"btrfs-progs" "btrfs-progs"
"cacert.unbundled" # some services require unbundled /etc/ssl/certs "cacert.unbundled" # some services require unbundled /etc/ssl/certs
"cryptsetup" "cryptsetup"
"curl"
"ddrescue" "ddrescue"
"dig" "dig"
"dtc" # device tree [de]compiler "dtc" # device tree [de]compiler

View File

@@ -0,0 +1,8 @@
{ ... }:
{
sane.programs.curl = {
sandbox.method = "bwrap";
sandbox.net = "all";
sandbox.autodetectCliPaths = "parent"; #< for `-o` option
};
}

View File

@@ -26,6 +26,7 @@
./conky ./conky
./cozy.nix ./cozy.nix
./cups.nix ./cups.nix
./curl.nix
./curlftpfs.nix ./curlftpfs.nix
./dbus.nix ./dbus.nix
./dconf.nix ./dconf.nix