|
7cb8b144b2
|
programs: sandbox fatresize
|
2024-02-16 10:45:56 +00:00 |
|
|
c2bb97e7e6
|
programs: ethtool: sandbox
|
2024-02-16 10:38:39 +00:00 |
|
|
5c7fa591a0
|
programs: sandbox: dtrx/e2fsprogs/efibootmgr/electrum
|
2024-02-16 10:32:18 +00:00 |
|
|
18c54e8b04
|
programs: sandbox cryptsetup and ddrescue (latter is untested, probably lacking!)
|
2024-02-16 10:05:24 +00:00 |
|
|
1416856fb6
|
programs: blueberry: sandbox
|
2024-02-16 07:58:00 +00:00 |
|
|
2a5bc6f612
|
programs: util-linux: disable sandbox
|
2024-02-16 07:37:59 +00:00 |
|
|
c56a6a8c24
|
programs: disable libcap_ng since it cant sandbox
|
2024-02-16 07:32:34 +00:00 |
|
|
f5a4bdedaf
|
programs: libcap_ng (netcap): disable sandbox
|
2024-02-16 07:32:05 +00:00 |
|
|
114a45f347
|
programs: pstree: sandbox
|
2024-02-16 06:57:45 +00:00 |
|
|
d53344d527
|
programs: killall: sandbox
|
2024-02-16 06:57:32 +00:00 |
|
|
561447de70
|
programs: shattered-pixel-dungeon: sandbox
|
2024-02-16 06:57:03 +00:00 |
|
|
4afd56ff4c
|
programs: powertop: fix capabilities typo in sandbox definition
|
2024-02-16 05:49:13 +00:00 |
|
|
3fd89ec91b
|
programs: sandbox powertop
|
2024-02-16 05:28:17 +00:00 |
|
|
4085828575
|
programs: sandbox parted
|
2024-02-16 05:28:07 +00:00 |
|
|
1a972927b6
|
programs: sandbox nethogs, nmon, nixpkgs-review
|
2024-02-16 05:27:50 +00:00 |
|
|
5f3ec42f57
|
programs: sandbox lsof with capsh only
can't get it to sandbox any more aggressively with either landlock or
bwrap
|
2024-02-16 04:55:18 +00:00 |
|
|
28aaeb051f
|
programs: disable sandboxing for strace and screen
|
2024-02-16 04:51:52 +00:00 |
|
|
9d252d095e
|
programs: htop/iotop/iftop: sandbox
|
2024-02-16 04:51:18 +00:00 |
|
|
4e5e4219ec
|
programs: usbutils: sandbox
|
2024-02-16 04:03:47 +00:00 |
|
|
824dd7c1f5
|
programs: endless-sky: sandbox with bwrap
|
2024-02-16 04:00:27 +00:00 |
|
|
b840a0d61c
|
programs: space-cadet-pinball: sandbox w/ bwrap
|
2024-02-16 03:58:09 +00:00 |
|
|
36bcecfd68
|
programs: sort
|
2024-02-16 03:53:53 +00:00 |
|
|
c3a5fb9394
|
programs: wdisplays: sandbox with bwrap
|
2024-02-16 03:53:27 +00:00 |
|
|
30507c3564
|
programs: soundconverter: sandbox with bwrap
|
2024-02-16 03:51:23 +00:00 |
|
|
48d96c1f36
|
programs: hase: sandbox with bwrap
couldn't test the net feature, because hase servers have since gone
offline :((
|
2024-02-16 03:48:59 +00:00 |
|
|
511752fab5
|
programs: xdg-desktop-portal{-gtk,-wlr}: enable sandbox
|
2024-02-16 03:17:19 +00:00 |
|
|
5e7f914354
|
programs: superTux: fix failing sandbox build
|
2024-02-16 03:16:28 +00:00 |
|
|
7eaffc9fa0
|
programs: w3m: enable sandbox
|
2024-02-15 18:25:48 +00:00 |
|
|
b7c1a6331d
|
programs: mate.engrampa: enable sandbox
|
2024-02-15 18:24:27 +00:00 |
|
|
52d768a162
|
programs: xterm: mark as not needing a sandbox
|
2024-02-15 17:26:55 +00:00 |
|
|
7a685d8de9
|
programs: inkscape: sandbox with bwrap
|
2024-02-15 17:26:37 +00:00 |
|
|
5090c4e88c
|
sway: define without using nixos "programs.sway"
motivation was to leverage 'sane.programs.sway.env' to statically configure SWAYSOCK. i think that's still the right way: we'll see
|
2024-02-15 14:25:27 +00:00 |
|
|
dcc2eb265d
|
programs: re-enable sandbox for tumiki-fighters and losslesscut (X applications)
|
2024-02-15 00:09:40 +00:00 |
|
|
518c3afd07
|
programs: sandbox: disable losslesscut/tumiki-fighters sandbox until i can figure out Xwayland
|
2024-02-14 14:37:59 +00:00 |
|
|
90dee85664
|
programs: sort alphabetically
|
2024-02-14 14:28:22 +00:00 |
|
|
26fc283fd9
|
programs: losslesscut: sandbox
|
2024-02-14 14:26:56 +00:00 |
|
|
d0430ce1e9
|
programs: pavucontrol/pwvucontrol: enable audio devices inside the sandbox
|
2024-02-14 14:26:56 +00:00 |
|
|
368a52b91e
|
programs: speedtest-cli: sandbox with bwrap
|
2024-02-14 14:26:56 +00:00 |
|
|
d90dacee1f
|
programs: grimshot: sandbox with bwrap
|
2024-02-14 14:17:41 +00:00 |
|
|
a6e2b3bc5c
|
programs: xdg-terminal-exec: disable sandbox
|
2024-02-14 14:11:35 +00:00 |
|
|
e5e79a6b60
|
programs: FileMimeInfo: disable sandbox
|
2024-02-14 13:54:21 +00:00 |
|
|
95f7eeeb5c
|
programs: libnotify: sandbox with bwrap
|
2024-02-14 13:49:48 +00:00 |
|
|
29d638c68b
|
programs: dig: sandbox with bwrap
|
2024-02-14 13:47:44 +00:00 |
|
|
677e6e679b
|
programs: sandbox {s,}waylock lockscreen
|
2024-02-14 08:48:03 +00:00 |
|
|
3eb47a9a8d
|
programs: swaylock: *partially* sandbox with capsh
|
2024-02-14 05:46:36 +00:00 |
|
|
f12b7afa1e
|
programs: mimeo: dont sandbox
|
2024-02-14 01:51:26 +00:00 |
|
|
080bd856ec
|
programs: sandboxing: only permit wayland socket access to those specific apps which require it
|
2024-02-14 01:49:49 +00:00 |
|
|
1a18ed533b
|
programs: don't include dbus in the sandbox by default
|
2024-02-13 11:58:33 +00:00 |
|
|
18eec98cae
|
programs: brightnessctl: switch to landlock
|
2024-02-13 11:58:33 +00:00 |
|
|
6eaaeeb91a
|
programs: remove audio from the sandbox by default
|
2024-02-13 11:14:38 +00:00 |
|