2a1d6fff08
programs: refactor whitelistDbus
2025-01-06 10:02:21 +00:00
50389407ef
mmcli: fix sandboxing
2024-10-29 06:21:23 +00:00
864e75afce
sanebox: purge
2024-10-29 05:59:01 +00:00
da19374044
docs: update references to s6-rc (now using systemd)
2024-10-03 03:36:38 +00:00
cc30673c10
mmcli: temporarily revert bunpen sandboxing
2024-09-22 01:05:53 +00:00
76583c49f4
UNTESTED: programs/assorted: switch every remaining bwrap sandboxed program over to the default (bunpen)
2024-09-21 23:35:46 +00:00
b7c86d5867
mmcli: sandbox
2024-07-06 18:49:18 +00:00
0786475c63
doc: mmcli: show how to sandbox... almost
2024-07-06 03:08:23 +00:00
514197a17f
docs: mmcli: include notes for how to enable the gps
2024-06-21 19:11:07 +00:00
6fe3d26b30
modemmanager: fix missing mmcli binary in service definition
2024-06-01 15:41:14 +00:00
539d9e45a2
networkmanager/modemmanager: ship separate packages for the daemon and CLI tools
...
they require fundamentally different sandboxing approaches. the daemon *can't* always use bwrap if it wants to run as non-root. meanwhile the CLI tools would mostly *prefer* to run under bwrap.
in the long term i'll maybe upstream the systemd sandboxing into nixpkgs, where there looks to be desire for it
2024-05-31 23:26:16 +00:00
