shelvacu/colins-nix-files
1
0
Fork 0
forked from colin/nix-files
Code Pull Requests Activity

programs: sandbox: disable losslesscut/tumiki-fighters sandbox until i can figure out Xwayland

Browse Source
This commit is contained in:
Colin 2024-02-14 14:37:59 +00:00
parent 90dee85664
commit 518c3afd07
1 changed files with 21 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
hosts/common/programs/assorted.nix
View File

@ -385,19 +385,20 @@ in
libnotify.sandbox.wrapperType = "wrappedDerivation";
libnotify.sandbox.whitelistDbus = [ "user" ]; # notify-send
losslesscut-bin.sandbox.method = "bwrap";
losslesscut-bin.sandbox.wrapperType = "wrappedDerivation";
losslesscut-bin.sandbox.extraHomePaths = [
"Music"
"Pictures" # i have some videos in there too.
"Pictures/servo-macros"
"Videos"
"Videos/servo"
"tmp"
];
losslesscut-bin.sandbox.whitelistAudio = true;
losslesscut-bin.sandbox.whitelistDri = true;
losslesscut-bin.sandbox.whitelistWayland = true;
# TODO: losslesscut: requires X server (Xwayland); sandbox can't find it..?
# losslesscut-bin.sandbox.method = "bwrap";
# losslesscut-bin.sandbox.wrapperType = "wrappedDerivation";
# losslesscut-bin.sandbox.extraHomePaths = [
# "Music"
# "Pictures" # i have some videos in there too.
# "Pictures/servo-macros"
# "Videos"
# "Videos/servo"
# "tmp"
# ];
# losslesscut-bin.sandbox.whitelistAudio = true;
# losslesscut-bin.sandbox.whitelistDri = true;
# losslesscut-bin.sandbox.whitelistWayland = true;
mercurial.sandbox.method = "bwrap"; # TODO:sandbox: untested
mercurial.sandbox.wrapperType = "wrappedDerivation";
@ -509,6 +510,13 @@ in
tree.sandbox.autodetectCliPaths = true;
tree.sandbox.whitelistPwd = true;
# TODO: tumiki-fighters: requires X server (Xwayland); sandbox can't find it..?
# tumiki-fighters.sandbox.method = "bwrap";
# tumiki-fighters.sandbox.wrapperType = "wrappedDerivation";
# tumiki-fighters.sandbox.whitelistAudio = true;
# tumiki-fighters.sandbox.whitelistDri = true; #< TODO: not sure if necessary
# tumiki-fighters.sandbox.whitelistWayland = true;
unzip.sandbox.method = "bwrap";
unzip.sandbox.wrapperType = "wrappedDerivation";
unzip.sandbox.autodetectCliPaths = "existingFileOrParent";