colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity
5,238 Commits 125 Branches 1 Tag 12 MiB
768b340c93
Commit Graph

2295 Commits

Author SHA1 Message Date
Colin
67395bdcd3 programs: ship forkstat 2024-02-18 11:58:30 +00:00
Colin
90ceeede74 programs: flare-signal: disable (unused) 2024-02-18 07:07:29 +00:00
Colin
32a704b1b8 moby: disable unused "calls" program 
i may have future use for it, but as-is currently it's not worth the difficulty of sandboxing
 2024-02-18 07:07:29 +00:00
Colin
a591be98d4 programs: portfolio-filemanager: sandbox 2024-02-18 07:07:29 +00:00
Colin
82e028e37d programs: nautilus: assign a mime priority 2024-02-18 07:07:29 +00:00
Colin
a531676d0d mime: include an error message when two file associations have identical mime priority 2024-02-18 07:07:29 +00:00
Colin
7f7543ee78 programs: planify: sandbox 2024-02-18 07:07:29 +00:00
Colin
8d0e3e0db3 programs: notejot: sandbox 2024-02-18 07:07:29 +00:00
Colin
bf352d184c programs: tangram: sandbox 2024-02-18 07:07:29 +00:00
Colin
81a6600f54 programs: xarchiver: sandbox 2024-02-18 07:07:29 +00:00
Colin
536f0aedc3 open-in-mpv: remove my patch which has been upstreamed, previously required to use xdg-open 2024-02-18 04:52:27 +00:00
Colin
408059420d snippets: prefer the repology link which specifically shows my outdated packages 2024-02-18 04:15:05 +00:00
Colin
6760fcf1f4 snippets: remove home-manager; add repology 2024-02-18 03:43:32 +00:00
Colin
98aafead94 programs: wob: add missing "coreutils" dep 
it *should* be acquired via user's PATH, but wob-pulse can start before sway imports PATH to systemd
 2024-02-17 16:38:22 +00:00
Colin
f8663cd827 programs: monero-gui: sandbox 2024-02-17 16:06:58 +00:00
Colin
af1ee1734d programs: wireguard-tools: sandbox 2024-02-17 15:54:16 +00:00
Colin
5375cab716 programs: ntfy-sh: sandbox 2024-02-17 15:47:47 +00:00
Colin
162b3f5674 imagemagick: don't add 'ghostscript' package to path 2024-02-17 15:45:50 +00:00
Colin
a729f91d21 programs: jq: add working sandbox criteria, but don't enable yet 
i need to handle the extremely common `cat foo | jq .` without adding
`.` to the sandbox
 2024-02-17 15:36:41 +00:00
Colin
a273b559e2 programs: gnome-disk-utility: sandbox 2024-02-17 15:36:28 +00:00
Colin
785b375671 programs: smartmontools (smartctl): sandbox 2024-02-17 15:36:13 +00:00
Colin
24cba0c856 programs: xq: remove 2024-02-17 15:30:23 +00:00
Colin
df1db5d01c programs: sox: sandbox 2024-02-17 15:27:22 +00:00
Colin
6749b64bca programs: nautilus: add mounted media to the sandbox 2024-02-17 15:26:49 +00:00
Colin
d3e4bdfcd5 programs: gdisk: fix sandboxing 2024-02-17 15:26:16 +00:00
Colin
799cd4373f programs: socat: disable 2024-02-17 15:11:12 +00:00
Colin
2efa6d1e27 programs: mepo: sandbox 2024-02-17 15:08:21 +00:00
Colin
a1470956a5 programs: gdisk: sandbox 2024-02-17 14:57:33 +00:00
Colin
556c20bc04 programs: vulkan-tools: sandbox 2024-02-17 14:53:22 +00:00
Colin
cf5f58dda6 programs: nmap: sandbox 2024-02-17 14:51:26 +00:00
Colin
fd30f7abbc dev-machines: disable broken ldd-aarch64 program 2024-02-17 14:47:28 +00:00
Colin
6f8c299c69 programs: xdg-desktop-portal: log more 2024-02-17 14:40:56 +00:00
Colin
bbf7aac062 programs: gnome-frog: sandbox 2024-02-17 14:40:42 +00:00
Colin
7d1fd2f30a programs: nvme-cli: sandbox 2024-02-17 14:40:29 +00:00
Colin
472987f164 programs: gimp: fix sandboxing failure 2024-02-17 13:43:35 +00:00
Colin
784c2145f3 programs: iputils: sandbox 2024-02-17 03:33:05 +00:00
Colin
0000afb315 programs: make nixosBuiltins package set more precise 2024-02-17 03:08:14 +00:00
Colin
31fa21bd20 programs: host/iproute2/iw/nettools/wirelesstools: sandbox 2024-02-17 03:05:58 +00:00
Colin
9510817604 programs: document nixosBuiltins programs 2024-02-17 02:40:28 +00:00
Colin
4a84de3ee4 programs: inetutils/iptables: sandbox 2024-02-17 02:32:57 +00:00
Colin
ab42a4cc5a programs: qemu: disable sandbox 2024-02-17 01:43:58 +00:00
Colin
f6537b083a programs: discord: add dbus to sandbox 2024-02-17 01:42:22 +00:00
Colin
5ff1d014b8 servo: transmission: fix user agent 2024-02-17 01:35:40 +00:00
Colin
1b4306e649 programs: switch bridge-utils, btrfs-progs from landlock -> bwrap 
landlock can't isolate net yet, so bwrap gives better sandboxing
 2024-02-16 15:32:41 +00:00
Colin
af8a8358bd programs: hdparm: sandbox 2024-02-16 15:32:41 +00:00
Colin
464c6c56c5 programs: btrfs-progs: sandbox 2024-02-16 15:32:41 +00:00
Colin
8e314e8b73 programs: bridge-utils: sandbox 2024-02-16 15:32:41 +00:00
Colin
198029f95f programs: netcat: sandbox 2024-02-16 15:32:41 +00:00
Colin
1d646459ab programs: pulsemixer: sandbox 2024-02-16 15:32:41 +00:00
Colin
8f3bab3636 programs: sort 2024-02-16 15:32:41 +00:00
Colin
a909a93c29 programs: strings: fix sandboxing 2024-02-16 15:32:41 +00:00
Colin
6aaa724abf programs: strings: sandbox 2024-02-16 14:57:25 +00:00
Colin
a1c721d5b4 programs: binutils-unwrapped -> strings: distribute just the binary i care about 2024-02-16 14:57:25 +00:00
Colin
4002a57e03 servo: transmission: advertise as 3.00 to deal with old trackers 2024-02-16 12:58:08 +00:00
Colin
74a0b0d125 gitea: serve phone-case-cq/ build files as proper html/js content type 2024-02-16 12:07:28 +00:00
Colin
cd3b4dde7b programs: nix-index: sandbox 2024-02-16 11:39:05 +00:00
Colin
a9d384688a programs: alsaUtils: sandbox 2024-02-16 11:28:43 +00:00
Colin
fffd6f4204 programs: pciutils: sandbox 2024-02-16 11:12:47 +00:00
Colin
324485d105 programs: networkmanagerapplet: sandbox 2024-02-16 11:07:24 +00:00
Colin
7cb8b144b2 programs: sandbox fatresize 2024-02-16 10:45:56 +00:00
Colin
c2bb97e7e6 programs: ethtool: sandbox 2024-02-16 10:38:39 +00:00
Colin
3cbdc03369 programs: zeal: disable sandboxing 2024-02-16 10:32:49 +00:00
Colin
5c7fa591a0 programs: sandbox: dtrx/e2fsprogs/efibootmgr/electrum 2024-02-16 10:32:18 +00:00
Colin
18c54e8b04 programs: sandbox cryptsetup and ddrescue (latter is untested, probably lacking!) 2024-02-16 10:05:24 +00:00
Colin
1416856fb6 programs: blueberry: sandbox 2024-02-16 07:58:00 +00:00
Colin
2a5bc6f612 programs: util-linux: disable sandbox 2024-02-16 07:37:59 +00:00
Colin
c56a6a8c24 programs: disable libcap_ng since it cant sandbox 2024-02-16 07:32:34 +00:00
Colin
f5a4bdedaf programs: libcap_ng (netcap): disable sandbox 2024-02-16 07:32:05 +00:00
Colin
114a45f347 programs: pstree: sandbox 2024-02-16 06:57:45 +00:00
Colin
d53344d527 programs: killall: sandbox 2024-02-16 06:57:32 +00:00
Colin
561447de70 programs: shattered-pixel-dungeon: sandbox 2024-02-16 06:57:03 +00:00
Colin
9cc12fab5d programs: gpodder: fix to work in sandbox (add dbus) 2024-02-16 06:07:46 +00:00
Colin
5cda3b2805 programs: firefox/fractal: document portal filechooser limitations 2024-02-16 05:49:56 +00:00
Colin
4afd56ff4c programs: powertop: fix capabilities typo in sandbox definition 2024-02-16 05:49:13 +00:00
Colin
00e4078300 programs: disable lemoa. it's broken and development doesn't seem to be progressing 2024-02-16 05:34:24 +00:00
Colin
94b4f78e39 programs: lemoa: sandbox 2024-02-16 05:32:22 +00:00
Colin
3fd89ec91b programs: sandbox powertop 2024-02-16 05:28:17 +00:00
Colin
4085828575 programs: sandbox parted 2024-02-16 05:28:07 +00:00
Colin
1a972927b6 programs: sandbox nethogs, nmon, nixpkgs-review 2024-02-16 05:27:50 +00:00
Colin
5f3ec42f57 programs: sandbox lsof with capsh only 
can't get it to sandbox any more aggressively with either landlock or
bwrap
 2024-02-16 04:55:18 +00:00
Colin
28aaeb051f programs: disable sandboxing for strace and screen 2024-02-16 04:51:52 +00:00
Colin
9d252d095e programs: htop/iotop/iftop: sandbox 2024-02-16 04:51:18 +00:00
Colin
4e5e4219ec programs: usbutils: sandbox 2024-02-16 04:03:47 +00:00
Colin
824dd7c1f5 programs: endless-sky: sandbox with bwrap 2024-02-16 04:00:27 +00:00
Colin
b840a0d61c programs: space-cadet-pinball: sandbox w/ bwrap 2024-02-16 03:58:09 +00:00
Colin
36bcecfd68 programs: sort 2024-02-16 03:53:53 +00:00
Colin
c3a5fb9394 programs: wdisplays: sandbox with bwrap 2024-02-16 03:53:27 +00:00
Colin
30507c3564 programs: soundconverter: sandbox with bwrap 2024-02-16 03:51:23 +00:00
Colin
2b66ffc58a programs: feedbackd: sandbox w/ bwrap 2024-02-16 03:49:59 +00:00
Colin
48d96c1f36 programs: hase: sandbox with bwrap 
couldn't test the net feature, because hase servers have since gone
offline :((
 2024-02-16 03:48:59 +00:00
Colin
cdf61755a3 programs: splatmoji: document the sandboxing approach 2024-02-16 03:46:48 +00:00
Colin
dd1dc69530 packages: remove unused kid3 2024-02-16 03:39:45 +00:00
Colin
481f54ea2f packages: disable unused packages: makemkv, mumble, openscad 2024-02-16 03:20:17 +00:00
Colin
511752fab5 programs: xdg-desktop-portal{-gtk,-wlr}: enable sandbox 2024-02-16 03:17:19 +00:00
Colin
40ed7cff1b programs: git: fix failing sandbox build 2024-02-16 03:16:46 +00:00
Colin
5e7f914354 programs: superTux: fix failing sandbox build 2024-02-16 03:16:28 +00:00
Colin
0dec8b6d5b programs: fontconfig: sandbox 2024-02-15 18:26:45 +00:00
Colin
7eaffc9fa0 programs: w3m: enable sandbox 2024-02-15 18:25:48 +00:00
Colin
b7c1a6331d programs: mate.engrampa: enable sandbox 2024-02-15 18:24:27 +00:00
Colin
d6868d58e6 xdg-desktop-portal: disable sandbox 2024-02-15 18:23:40 +00:00