Colin
539d9e45a2
they require fundamentally different sandboxing approaches. the daemon *can't* always use bwrap if it wants to run as non-root. meanwhile the CLI tools would mostly *prefer* to run under bwrap. in the long term i'll maybe upstream the systemd sandboxing into nixpkgs, where there looks to be desire for it
9 lines
125 B
Nix
9 lines
125 B
Nix
{ pkgs, ... }:
|
|
{
|
|
sane.programs.mmcli = {
|
|
packageUnwrapped = pkgs.modemmanager-split.mmcli;
|
|
# TODO: sandbox
|
|
};
|
|
}
|
|
|