sed: sandbox

This commit is contained in:
Colin 2024-03-03 06:57:42 +00:00
parent 8821b3ca7d
commit ed87792f9b

View File

@ -477,7 +477,11 @@ in
".persist/plaintext"
];
gnused = {};
# sed: there is an edgecase of `--file=<foo>`, wherein `foo` won't be whitelisted.
gnused.sandbox.method = "bwrap";
gnused.sandbox.autodetectCliPaths = "existingFile";
gnused.sandbox.whitelistPwd = true; #< `-i` flag creates a temporary file in pwd (?) and then moves it.
gpsd = {};
gptfdisk.sandbox.method = "landlock";