colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

seatd: patch sandboxing for desko

Browse Source
This commit is contained in:
Colin 2024-05-29 19:42:45 +00:00
parent fa94fa8e6c
commit f1d397940f
1 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
hosts/common/programs/seatd.nix
View File

@ -12,16 +12,16 @@ lib.mkMerge [
"dac_override" #< TODO: is there no way to get rid of this?
];
sandbox.extraPaths = [
"/dev/dri"
# "/dev/drm_dp_aux0"
# "/dev/drm_dp_aux1"
# "/dev/drm_dp_aux2"
# "/dev/fb0"
"/dev/input"
# "/dev/uinput"
"/dev/tty0"
"/dev/tty1"
# "/dev"
"/dev" #< TODO: this can be removed if i have seatd restart on client error such that seatd can discover devices as they appear
# "/dev/dri"
# # "/dev/drm_dp_aux0"
# # "/dev/drm_dp_aux1"
# # "/dev/drm_dp_aux2"
# # "/dev/fb0"
# "/dev/input"
# # "/dev/uinput"
# "/dev/tty0"
# "/dev/tty1"
# "/proc"
"/run" #< TODO: confine this to some subdirectory
# "/sys"