Commit Graph

5146 Commits

Author SHA1 Message Date
24cba0c856 programs: xq: remove 2024-02-17 15:30:23 +00:00
df1db5d01c programs: sox: sandbox 2024-02-17 15:27:22 +00:00
6749b64bca programs: nautilus: add mounted media to the sandbox 2024-02-17 15:26:49 +00:00
d3e4bdfcd5 programs: gdisk: fix sandboxing 2024-02-17 15:26:16 +00:00
799cd4373f programs: socat: disable 2024-02-17 15:11:12 +00:00
2efa6d1e27 programs: mepo: sandbox 2024-02-17 15:08:21 +00:00
a1470956a5 programs: gdisk: sandbox 2024-02-17 14:57:33 +00:00
556c20bc04 programs: vulkan-tools: sandbox 2024-02-17 14:53:22 +00:00
cf5f58dda6 programs: nmap: sandbox 2024-02-17 14:51:26 +00:00
fd30f7abbc dev-machines: disable broken ldd-aarch64 program 2024-02-17 14:47:28 +00:00
6f8c299c69 programs: xdg-desktop-portal: log more 2024-02-17 14:40:56 +00:00
bbf7aac062 programs: gnome-frog: sandbox 2024-02-17 14:40:42 +00:00
7d1fd2f30a programs: nvme-cli: sandbox 2024-02-17 14:40:29 +00:00
472987f164 programs: gimp: fix sandboxing failure 2024-02-17 13:43:35 +00:00
784c2145f3 programs: iputils: sandbox 2024-02-17 03:33:05 +00:00
4ced02b0b2 modules/programs: make-sandboxed: fix incorrect "priority" attribute 2024-02-17 03:32:49 +00:00
0000afb315 programs: make nixosBuiltins package set more precise 2024-02-17 03:08:14 +00:00
31fa21bd20 programs: host/iproute2/iw/nettools/wirelesstools: sandbox 2024-02-17 03:05:58 +00:00
9510817604 programs: document nixosBuiltins programs 2024-02-17 02:40:28 +00:00
4a84de3ee4 programs: inetutils/iptables: sandbox 2024-02-17 02:32:57 +00:00
ab42a4cc5a programs: qemu: disable sandbox 2024-02-17 01:43:58 +00:00
f6537b083a programs: discord: add dbus to sandbox 2024-02-17 01:42:22 +00:00
5ff1d014b8 servo: transmission: fix user agent 2024-02-17 01:35:40 +00:00
fa41e6c402 nixpkgs: 2024-02-14 -> 2024-02-16; uninsane-dot-org -> 2024-02-15
```
• Updated input 'nixpkgs-next-unpatched':
    'github:nixos/nixpkgs/52e165035c897a7b41ff26bc235f8d841e9d3850' (2024-02-14)
  → 'github:nixos/nixpkgs/0ec5bef772dc12003df7a55f7be1f7b8809f8b48' (2024-02-16)
• Updated input 'nixpkgs-unpatched':
    'github:nixos/nixpkgs/c0a130d16b170f4820c3d2ed294a7aaabf451bfd' (2024-02-14)
  → 'github:nixos/nixpkgs/1225df86908f6f5b23553e9d77da4df4bfdd58ef' (2024-02-16)
• Updated input 'uninsane-dot-org':
    'git+https://git.uninsane.org/colin/uninsane?ref=refs/heads/master&rev=4a1fa488e64e6c87c6c951e3fafb2684692f64d3' (2024-01-01)
  → 'git+https://git.uninsane.org/colin/uninsane?ref=refs/heads/master&rev=bb10cd8853d05191e4d62947d93687c462e92c30' (2024-02-15)
```
2024-02-16 15:34:19 +00:00
1b4306e649 programs: switch bridge-utils, btrfs-progs from landlock -> bwrap
landlock can't isolate net yet, so bwrap gives better sandboxing
2024-02-16 15:32:41 +00:00
af8a8358bd programs: hdparm: sandbox 2024-02-16 15:32:41 +00:00
464c6c56c5 programs: btrfs-progs: sandbox 2024-02-16 15:32:41 +00:00
8e314e8b73 programs: bridge-utils: sandbox 2024-02-16 15:32:41 +00:00
198029f95f programs: netcat: sandbox 2024-02-16 15:32:41 +00:00
1d646459ab programs: pulsemixer: sandbox 2024-02-16 15:32:41 +00:00
8f3bab3636 programs: sort 2024-02-16 15:32:41 +00:00
a909a93c29 programs: strings: fix sandboxing 2024-02-16 15:32:41 +00:00
6aaa724abf programs: strings: sandbox 2024-02-16 14:57:25 +00:00
a1c721d5b4 programs: binutils-unwrapped -> strings: distribute just the binary i care about 2024-02-16 14:57:25 +00:00
4002a57e03 servo: transmission: advertise as 3.00 to deal with old trackers 2024-02-16 12:58:08 +00:00
74a0b0d125 gitea: serve phone-case-cq/ build files as proper html/js content type 2024-02-16 12:07:28 +00:00
cd3b4dde7b programs: nix-index: sandbox 2024-02-16 11:39:05 +00:00
a9d384688a programs: alsaUtils: sandbox 2024-02-16 11:28:43 +00:00
fffd6f4204 programs: pciutils: sandbox 2024-02-16 11:12:47 +00:00
324485d105 programs: networkmanagerapplet: sandbox 2024-02-16 11:07:24 +00:00
7cb8b144b2 programs: sandbox fatresize 2024-02-16 10:45:56 +00:00
c2bb97e7e6 programs: ethtool: sandbox 2024-02-16 10:38:39 +00:00
3cbdc03369 programs: zeal: disable sandboxing 2024-02-16 10:32:49 +00:00
5c7fa591a0 programs: sandbox: dtrx/e2fsprogs/efibootmgr/electrum 2024-02-16 10:32:18 +00:00
18c54e8b04 programs: sandbox cryptsetup and ddrescue (latter is untested, probably lacking!) 2024-02-16 10:05:24 +00:00
1416856fb6 programs: blueberry: sandbox 2024-02-16 07:58:00 +00:00
2a5bc6f612 programs: util-linux: disable sandbox 2024-02-16 07:37:59 +00:00
c56a6a8c24 programs: disable libcap_ng since it cant sandbox 2024-02-16 07:32:34 +00:00
f5a4bdedaf programs: libcap_ng (netcap): disable sandbox 2024-02-16 07:32:05 +00:00
114a45f347 programs: pstree: sandbox 2024-02-16 06:57:45 +00:00