diff --git a/hosts/common/programs/nwg-panel/default.nix b/hosts/common/programs/nwg-panel/default.nix
index 09de9043d..811a4a098 100644
--- a/hosts/common/programs/nwg-panel/default.nix
+++ b/hosts/common/programs/nwg-panel/default.nix
@@ -23,7 +23,7 @@ in
     suggestedPrograms = [
       "brightnessctl"
     ];
-    sandbox.enable = false;  # trivial, and all deps are sandboxed
+    sandbox = config.sane.programs.brightnessctl.sandbox;
   };
 
   sane.programs.nwg-panel = {