Jonas Heinrich
9a30f53ffe
nixos/firejail: Fix order of extrsArgs before profile wrappedBinaries option
2022-03-03 21:35:37 -05:00
Aidan Gauland
82dd41e74d
firejail: clarify wrappedBinaries option description
...
I had trouble getting programs.firejail.wrappedBinaries to have any effect on my
system (#152852 ), because I did not realise that "put[ting] the actual
application binary in the global environment" included adding the program
package to environment.systemPackages, and I thought that the package must be
present for this option to take effect. I have added a clarifying parenthetical
statement explicitly mentioning environment.systemPackages in this caveat.
2022-01-01 18:13:21 +13:00
Naïm Favier
2ddc335e6f
nixos/doc: clean up defaults and examples
2021-10-04 12:47:20 +02:00
rnhmjoj
fedd7cd690
nixos: explicitely set security.wrappers ownership
...
This is slightly more verbose and inconvenient, but it forces you
to think about what the wrapper ownership and permissions will be.
2021-09-13 13:48:13 +02:00
Symphorien Gibol
6fa1646268
nixos/firejail: allow to pass options to firejail
2020-11-14 12:00:00 +00:00
Joachim Fasting
1b575dbd79
nixos/firejail: use local runCommand
...
Also:
- use `runtimeShell`; and
- remove unused `makeWrapper` input; and
- `exec()` to shed wrapping shell
2020-03-14 03:09:48 +00:00
snicket2100
65abd808d5
firejail: system package on programs.firejail.enable
...
this way the man page etc. becomes available if we enable firejail with
`programs.firejail.enable = true`
2020-03-13 03:28:08 +00:00
Martin Milata
96e36bf1ba
nixos/firejail: add example for wrappedBinaries
2020-02-29 19:06:28 +01:00
volth
08f68313a4
treewide: remove redundant rec
2019-08-28 11:07:32 +00:00
Peter Hoeg
65eb3a590d
firejail: add nixos module
...
Also add support for wrapping binaries with firejail.
2018-07-14 20:21:41 +08:00
