ryan4yin | 二花 c277c81cd6 feat(nixpak): sandbox six desktop apps (#497) ...

* feat(nixpak): sandbox six desktop apps

* chore(nixpak): trim OBS plugin set

* fix(nixpak): enable OBS on aarch64

* fix(nixpak): let imv read the full home directory

* fix(home): drop redundant freerdp package

* fix(nixpak): grant OBS access to V4L2 camera devices

* fix(nixpak): expose V4L2 sysfs to OBS

* fix(nixpak): expose NVIDIA encode library to OBS

* docs(nixpak): record OBS interactive validation

* docs(nixpak): record OBS RTMP validation

* fix(nixpak): run MuseScore via XWayland and PulseAudio

* docs(nixpak): explain app sandboxing rationale

* fix(nixpak): route MuseScore ALSA through PipeWire

2026-11-01 01:24:47 -05:00

..

policy

feat(nixpak): sandbox six desktop apps (#497)

2026-11-01 01:24:47 -05:00

policy-lib.nix

feat(nixpak): sandbox six desktop apps (#497)

2026-11-01 01:24:47 -05:00

policy.nix

refactor(nixpak): split policy checks into per-app suites (#493)

2026-11-01 10:05:15 +08:00

runtime-validation.md

feat(nixpak): sandbox six desktop apps (#497)

2026-11-01 01:24:47 -05:00

verify-chromium.py

docs(nixpak): consolidate runtime validation notes

2026-11-01 09:24:23 +08:00