colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

programs: sane-tag-music: sandbox

Browse Source
This commit is contained in:
Colin 2024-02-20 19:26:18 +00:00
parent 284b698015
commit ca4d1e3b9d
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
hosts/common/programs/sane-scripts.nix
View File

@ -152,6 +152,12 @@ in
# if `tee` isn't trustworthy we have bigger problems
"sane-scripts.sudo-redirect".sandbox.enable = false;
"sane-scripts.tag-music".sandbox = {
method = "bwrap";
wrapperType = "wrappedDerivation";
autodetectCliPaths = "existing";
};
"sane-scripts.which".sandbox = {
method = "bwrap";
wrapperType = "wrappedDerivation";