9 commits

Author	SHA1	Message	Date
Aidan Gauland	82dd41e74d	firejail: clarify wrappedBinaries option description ... I had trouble getting programs.firejail.wrappedBinaries to have any effect on my system (#152852), because I did not realise that "put[ting] the actual application binary in the global environment" included adding the program package to environment.systemPackages, and I thought that the package must be present for this option to take effect. I have added a clarifying parenthetical statement explicitly mentioning environment.systemPackages in this caveat.	2022-01-01 18:13:21 +13:00
Naïm Favier	2ddc335e6f	nixos/doc: clean up defaults and examples	2021-10-04 12:47:20 +02:00
rnhmjoj	fedd7cd690	nixos: explicitely set security.wrappers ownership ... This is slightly more verbose and inconvenient, but it forces you to think about what the wrapper ownership and permissions will be.	2021-09-13 13:48:13 +02:00
Symphorien Gibol	6fa1646268	nixos/firejail: allow to pass options to firejail	2020-11-14 12:00:00 +00:00
Joachim Fasting	1b575dbd79	nixos/firejail: use local runCommand ... Also: - use `runtimeShell`; and - remove unused `makeWrapper` input; and - `exec()` to shed wrapping shell	2020-03-14 03:09:48 +00:00
snicket2100	65abd808d5	firejail: system package on programs.firejail.enable ... this way the man page etc. becomes available if we enable firejail with `programs.firejail.enable = true`	2020-03-13 03:28:08 +00:00
Martin Milata	96e36bf1ba	nixos/firejail: add example for wrappedBinaries	2020-02-29 19:06:28 +01:00
volth	08f68313a4	treewide: remove redundant rec	2019-08-28 11:07:32 +00:00
Peter Hoeg	65eb3a590d	firejail: add nixos module ... Also add support for wrapping binaries with firejail.	2018-07-14 20:21:41 +08:00