|
|
c56a6a8c24
|
programs: disable libcap_ng since it cant sandbox
|
2024-02-16 07:32:34 +00:00 |
|
|
|
f5a4bdedaf
|
programs: libcap_ng (netcap): disable sandbox
|
2024-02-16 07:32:05 +00:00 |
|
|
|
114a45f347
|
programs: pstree: sandbox
|
2024-02-16 06:57:45 +00:00 |
|
|
|
d53344d527
|
programs: killall: sandbox
|
2024-02-16 06:57:32 +00:00 |
|
|
|
561447de70
|
programs: shattered-pixel-dungeon: sandbox
|
2024-02-16 06:57:03 +00:00 |
|
|
|
b6f918c32f
|
TODO.md: update sandboxing tasks
|
2024-02-16 06:18:11 +00:00 |
|
|
|
9cc12fab5d
|
programs: gpodder: fix to work in sandbox (add dbus)
|
2024-02-16 06:07:46 +00:00 |
|
|
|
5cda3b2805
|
programs: firefox/fractal: document portal filechooser limitations
|
2024-02-16 05:49:56 +00:00 |
|
|
|
4afd56ff4c
|
programs: powertop: fix capabilities typo in sandbox definition
|
2024-02-16 05:49:13 +00:00 |
|
|
|
029ba43bd6
|
modules/programs: sane-sandboxed: invoke "capsh" with the --no-new-privs argument
|
2024-02-16 05:48:50 +00:00 |
|
|
|
00e4078300
|
programs: disable lemoa. it's broken and development doesn't seem to be progressing
|
2024-02-16 05:34:24 +00:00 |
|
|
|
94b4f78e39
|
programs: lemoa: sandbox
|
2024-02-16 05:32:22 +00:00 |
|
|
|
3fd89ec91b
|
programs: sandbox powertop
|
2024-02-16 05:28:17 +00:00 |
|
|
|
4085828575
|
programs: sandbox parted
|
2024-02-16 05:28:07 +00:00 |
|
|
|
1a972927b6
|
programs: sandbox nethogs, nmon, nixpkgs-review
|
2024-02-16 05:27:50 +00:00 |
|
|
|
5f3ec42f57
|
programs: sandbox lsof with capsh only
can't get it to sandbox any more aggressively with either landlock or
bwrap
|
2024-02-16 04:55:18 +00:00 |
|
|
|
28aaeb051f
|
programs: disable sandboxing for strace and screen
|
2024-02-16 04:51:52 +00:00 |
|
|
|
9d252d095e
|
programs: htop/iotop/iftop: sandbox
|
2024-02-16 04:51:18 +00:00 |
|
|
|
4e5e4219ec
|
programs: usbutils: sandbox
|
2024-02-16 04:03:47 +00:00 |
|
|
|
824dd7c1f5
|
programs: endless-sky: sandbox with bwrap
|
2024-02-16 04:00:27 +00:00 |
|
|
|
b840a0d61c
|
programs: space-cadet-pinball: sandbox w/ bwrap
|
2024-02-16 03:58:09 +00:00 |
|
|
|
36bcecfd68
|
programs: sort
|
2024-02-16 03:53:53 +00:00 |
|
|
|
c3a5fb9394
|
programs: wdisplays: sandbox with bwrap
|
2024-02-16 03:53:27 +00:00 |
|
|
|
30507c3564
|
programs: soundconverter: sandbox with bwrap
|
2024-02-16 03:51:23 +00:00 |
|
|
|
2b66ffc58a
|
programs: feedbackd: sandbox w/ bwrap
|
2024-02-16 03:49:59 +00:00 |
|
|
|
48d96c1f36
|
programs: hase: sandbox with bwrap
couldn't test the net feature, because hase servers have since gone
offline :((
|
2024-02-16 03:48:59 +00:00 |
|
|
|
cdf61755a3
|
programs: splatmoji: document the sandboxing approach
|
2024-02-16 03:46:48 +00:00 |
|
|
|
dd1dc69530
|
packages: remove unused kid3
|
2024-02-16 03:39:45 +00:00 |
|
|
|
481f54ea2f
|
packages: disable unused packages: makemkv, mumble, openscad
|
2024-02-16 03:20:17 +00:00 |
|
|
|
511752fab5
|
programs: xdg-desktop-portal{-gtk,-wlr}: enable sandbox
|
2024-02-16 03:17:19 +00:00 |
|
|
|
40ed7cff1b
|
programs: git: fix failing sandbox build
|
2024-02-16 03:16:46 +00:00 |
|
|
|
5e7f914354
|
programs: superTux: fix failing sandbox build
|
2024-02-16 03:16:28 +00:00 |
|
|
|
8c9c6ec979
|
modules/programs: make-sandboxed: support /libexec binaries
|
2024-02-16 03:15:45 +00:00 |
|
|
|
0dec8b6d5b
|
programs: fontconfig: sandbox
|
2024-02-15 18:26:45 +00:00 |
|
|
|
7eaffc9fa0
|
programs: w3m: enable sandbox
|
2024-02-15 18:25:48 +00:00 |
|
|
|
b7c1a6331d
|
programs: mate.engrampa: enable sandbox
|
2024-02-15 18:24:27 +00:00 |
|
|
|
d6868d58e6
|
xdg-desktop-portal: disable sandbox
|
2024-02-15 18:23:40 +00:00 |
|
|
|
1edb1fc8b6
|
modules/programs: sane-sandboxed: avoid adding the sandbox implementation to $PATH
|
2024-02-15 17:58:22 +00:00 |
|
|
|
52d768a162
|
programs: xterm: mark as not needing a sandbox
|
2024-02-15 17:26:55 +00:00 |
|
|
|
7a685d8de9
|
programs: inkscape: sandbox with bwrap
|
2024-02-15 17:26:37 +00:00 |
|
|
|
838c6d7dc8
|
programs: swaync: sandbox
|
2024-02-15 16:38:38 +00:00 |
|
|
|
8d20dcadd1
|
modules/programs: sane-sandboxed: add --sane-sandbox-keep-pidspace flag
|
2024-02-15 15:05:28 +00:00 |
|
|
|
9d706df5b5
|
programs: waybar: narrow the /run/user paths to just sway-ipc.sock
|
2024-02-15 14:40:01 +00:00 |
|
|
|
06f1f1e9ea
|
sway: give SWAYSOCK a consistent name
|
2024-02-15 14:38:54 +00:00 |
|
|
|
2fbbe7fd78
|
sway: remove unused "sane.gui.sway.package" option
|
2024-02-15 14:38:10 +00:00 |
|
|
|
24d23f7903
|
programs: bemenu: fix sandboxing
|
2024-02-15 14:33:20 +00:00 |
|
|
|
0394aa65e9
|
sway: simplify config
|
2024-02-15 14:25:45 +00:00 |
|
|
|
5090c4e88c
|
sway: define without using nixos "programs.sway"
motivation was to leverage 'sane.programs.sway.env' to statically configure SWAYSOCK. i think that's still the right way: we'll see
|
2024-02-15 14:25:27 +00:00 |
|
|
|
081114da65
|
programs: waybar: sandbox in a way that works well for moby too
|
2024-02-15 13:16:18 +00:00 |
|
|
|
c943442c94
|
modules/programs: sane-sandboxed: add --sane-sandbox-method none for benchmarking
|
2024-02-15 13:13:39 +00:00 |
|
