programs: nmap: sandbox

2024-02-17 14:51:26 +00:00
parent fd30f7abbc
commit cf5f58dda6
1 changed files with 4 additions and 0 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -662,6 +662,10 @@ in
      "/nix"
    ];

+    nmap.sandbox.method = "bwrap";
+    nmap.sandbox.wrapperType = "wrappedDerivation";
+    nmap.sandbox.net = "all";  # clearnet and lan
+
    nmon.sandbox.method = "landlock";
    nmon.sandbox.wrapperType = "wrappedDerivation";
    nmon.sandbox.extraPaths = [