imagemagick: sandbox with bunpen

This commit is contained in:
2024-09-03 17:52:23 +00:00
parent 2cee6ea954
commit f537049387

View File

@@ -3,7 +3,7 @@
sane.programs.imagemagick = {
buildCost = 1;
sandbox.method = "bwrap";
sandbox.method = "bunpen";
sandbox.wrapperType = "inplace"; # /etc/ImageMagick-7/delegates.xml refers to bins by absolute path
sandbox.whitelistPwd = true;
sandbox.autodetectCliPaths = "existingOrParent"; #< arg formatting is complicated enough that this won't always work.