pkill: sandbox with bunpen

2024-09-03 14:12:36 +00:00
parent 94a261280b
commit fc5a1c7d5e
1 changed files with 2 additions and 1 deletions
--- a/hosts/common/programs/pkill.nix
+++ b/hosts/common/programs/pkill.nix
@@ -2,7 +2,8 @@
 {
  sane.programs.pkill = {
    packageUnwrapped = pkgs.linkBinIntoOwnPackage pkgs.procps "pkill";
-    sandbox.method = "bwrap";
+    sandbox.method = "bunpen";
    sandbox.isolatePids = false;
+    sandbox.extraPaths = [ "/proc" ];
  };
 }