colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

sane-open: sandbox with bunpen

Browse Source
This commit is contained in:
Colin
2024-09-03 12:41:12 +00:00
parent a0240dca36
commit f959a0dd00
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
hosts/common/programs/sane-open.nix
View File

@@ -1,7 +1,7 @@
{ ... }: { ... }:
{ {
sane.programs.sane-open = { sane.programs.sane-open = {
sandbox.method = "bwrap"; sandbox.method = "bunpen";
sandbox.autodetectCliPaths = "existing"; # for when opening a file sandbox.autodetectCliPaths = "existing"; # for when opening a file
sandbox.whitelistDbus = [ "user" ]; sandbox.whitelistDbus = [ "user" ];
sandbox.isolatePids = false; #< to toggle keyboard sandbox.isolatePids = false; #< to toggle keyboard
@@ -9,6 +9,7 @@
".local/share/applications" ".local/share/applications"
]; ];
sandbox.extraRuntimePaths = [ "sway" ]; #< calls `swaymsg` to query rotation and see if there's room for a keyboard sandbox.extraRuntimePaths = [ "sway" ]; #< calls `swaymsg` to query rotation and see if there's room for a keyboard
sandbox.extraPaths = [ "/proc" ]; #< to be able to launch bwrap programs
suggestedPrograms = [ suggestedPrograms = [
"gdbus" "gdbus"
"xdg-utils" "xdg-utils"