colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

gparted: sandbox with bunpen

Browse Source
This commit is contained in:
Colin
2024-09-11 01:59:19 +00:00
parent c6d93598ed
commit f6b6d6488d
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/common/programs/assorted.nix
View File

@@ -672,7 +672,8 @@ in
];
# gparted: run with `sudo -E gparted` (-E to keep the wayland socket)
gparted.sandbox.method = "landlock";
gparted.sandbox.method = "bunpen";
gparted.sandbox.tryKeepUsers = true;
gparted.sandbox.capabilities = [ "dac_override" "sys_admin" ];
gparted.sandbox.extraPaths = [
"/dev" #< necessary to see any devices
@@ -682,6 +683,7 @@ in
gparted.sandbox.extraRuntimePaths = [
"dconf" #< silences "unable to create file '/run/user/colin/dconf/user': Permission denied. dconf will not work properly."
];
gparted.sandbox.whitelistWayland = true;
hping.sandbox.method = "bunpen";
hping.sandbox.net = "all";