colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

blanket: fix dbus sandboxing

Browse Source
This commit is contained in:
Colin
2025-01-31 07:13:05 +00:00
parent 6d5c75b38c
commit cb1a72cb71
3 changed files with 14 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
hosts/common/programs/assorted.nix
View File

@@ -452,11 +452,6 @@ in
bash-language-server.sandbox.whitelistPwd = true; bash-language-server.sandbox.whitelistPwd = true;
blanket.buildCost = 1;
blanket.sandbox.whitelistAudio = true;
# blanket.sandbox.whitelistDbus.user = true; #< TODO: reduce # TODO: untested
blanket.sandbox.whitelistWayland = true;
bridge-utils.sandbox.net = "all"; bridge-utils.sandbox.net = "all";
"cacert.unbundled".sandbox.enable = false; #< data only "cacert.unbundled".sandbox.enable = false; #< data only

13
hosts/common/programs/blanket.nix Normal file
View File

@@ -0,0 +1,13 @@
{ ... }:
{
sane.programs.blanket = {
# com.rafaelmardojai.Blanket
buildCost = 1;
sandbox.whitelistAudio = true;
sandbox.whitelistDbus.user.own = [
"com.rafaelmardojai.Blanket"
"org.mpris.MediaPlayer2.Blanket"
];
sandbox.whitelistWayland = true;
};
}

1
hosts/common/programs/default.nix
View File

@@ -13,6 +13,7 @@
./avahi.nix ./avahi.nix
./bemenu.nix ./bemenu.nix
./bitcoin-cli.nix ./bitcoin-cli.nix
./blanket.nix
./blueberry.nix ./blueberry.nix
./blueman.nix ./blueman.nix
./bonsai.nix ./bonsai.nix