From df1db5d01cb085058e19aa1b280330b7aaf83526 Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Sat, 17 Feb 2024 15:27:22 +0000
Subject: [PATCH] programs: sox: sandbox

---
 hosts/common/programs/assorted.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index f151f3ca..83378e47 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -792,6 +792,11 @@ in
     ];
     soundconverter.sandbox.autodetectCliPaths = "existingFileOrParent";
 
+    sox.sandbox.method = "bwrap";
+    sox.sandbox.wrapperType = "wrappedDerivation";
+    sox.sandbox.autodetectCliPaths = "existingFileOrParent";
+    sox.sandbox.whitelistAudio = true;
+
     space-cadet-pinball.persist.byStore.plaintext = [ ".local/share/SpaceCadetPinball" ];
     space-cadet-pinball.sandbox.method = "bwrap";
     space-cadet-pinball.sandbox.wrapperType = "wrappedDerivation";