Ranomier/NixToSee
Ranomier/NixToSee
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

uuuupdate

Browse source
This commit is contained in:
Ranomier 2024-10-06 02:44:35 +02:00
parent 6e143facef
commit 63c50cfa2a
27 changed files with 314 additions and 257 deletions
Download patch file Download diff file Expand all files Collapse all files

12
modules/sec_auth/firejail.nix
View file

@ -1,9 +1,8 @@
# TODO refine firejail it seems that / is not shielded enough and app armor does not work
{ pkgs, ... }:
{
{pkgs, ...}: {
programs.firejail = {
enable = true;
wrappedBinaries = {
enable = true;
wrappedBinaries = {
firefox = {
executable = "${pkgs.firefox}/bin/firefox";
profile = "${pkgs.firejail}/etc/firejail/firefox.profile";
@ -51,11 +50,10 @@
};
};
environment.etc = {
"firejail/brave.local".text = ''
"firejail/brave.local".text = ''
whitelist ''${HOME}/.config/brave
whitelist ''${HOME}/.local
whitelist ''${HOME}/Downloads
'';
'';
};
}