From d2f470dc74b5342d2bb464bf160fe5ae4a42c3d4 Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Sun, 3 Mar 2024 04:44:23 +0000
Subject: [PATCH] wvkbd: sandbox

---
 hosts/common/programs/wvkbd.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/hosts/common/programs/wvkbd.nix b/hosts/common/programs/wvkbd.nix
index 1bad9e09a..8927b171a 100644
--- a/hosts/common/programs/wvkbd.nix
+++ b/hosts/common/programs/wvkbd.nix
@@ -4,6 +4,9 @@ let
 in
 {
   sane.programs.wvkbd = {
+    sandbox.method = "bwrap";
+    sandbox.whitelistWayland = true;
+
     services.wvkbd = {
       description = "wvkbd: wayland virtual keyboard";
       after = [ "graphical-session.target" ];