colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

assorted: remove outdated comments about landlock > bwrap

Browse Source
This commit is contained in:
Colin
2024-09-03 04:49:36 +00:00
parent 2cc23525ec
commit c7823ab3f4
4 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
hosts/common/programs/assorted.nix
View File

@@ -604,7 +604,7 @@ in
"/proc" "/proc"
]; ];
fuzzel.sandbox.method = "bwrap"; #< landlock nearly works, but unable to open ~/.cache fuzzel.sandbox.method = "bwrap";
fuzzel.sandbox.whitelistWayland = true; fuzzel.sandbox.whitelistWayland = true;
fuzzel.persist.byStore.private = [ fuzzel.persist.byStore.private = [
# this is a file of recent selections # this is a file of recent selections

2
hosts/common/programs/brightnessctl.nix
View File

@@ -4,7 +4,7 @@ let
in in
{ {
sane.programs.brightnessctl = { sane.programs.brightnessctl = {
sandbox.method = "bunpen"; # also bwrap, but landlock is more responsive sandbox.method = "bunpen";
sandbox.extraPaths = [ sandbox.extraPaths = [
"/sys/class/backlight" "/sys/class/backlight"
"/sys/class/leds" "/sys/class/leds"

2
hosts/common/programs/cozy.nix
View File

@@ -15,7 +15,7 @@
buildCost = 1; buildCost = 1;
sandbox.method = "bwrap"; # landlock gives: _multiprocessing.SemLock: Permission Denied sandbox.method = "bwrap";
sandbox.whitelistAudio = true; sandbox.whitelistAudio = true;
sandbox.whitelistDbus = [ "user" ]; # mpris sandbox.whitelistDbus = [ "user" ]; # mpris
sandbox.whitelistWayland = true; sandbox.whitelistWayland = true;

2
hosts/common/programs/koreader/default.nix
View File

@@ -45,7 +45,7 @@ let
in { in {
sane.programs.koreader = { sane.programs.koreader = {
packageUnwrapped = pkgs.koreader-from-src; packageUnwrapped = pkgs.koreader-from-src;
sandbox.method = "bwrap"; # sandboxes fine under landlock too, except for FTP sandbox.method = "bwrap";
sandbox.net = "clearnet"; sandbox.net = "clearnet";
sandbox.whitelistDbus = [ "user" ]; # for opening the web browser via portal sandbox.whitelistDbus = [ "user" ]; # for opening the web browser via portal
sandbox.whitelistDri = true; # reduces startup time and subjective page flip time sandbox.whitelistDri = true; # reduces startup time and subjective page flip time