mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-11-13 12:13:36 +01:00
ryan4yin | 二花
c277c81cd6
* feat(nixpak): sandbox six desktop apps * chore(nixpak): trim OBS plugin set * fix(nixpak): enable OBS on aarch64 * fix(nixpak): let imv read the full home directory * fix(home): drop redundant freerdp package * fix(nixpak): grant OBS access to V4L2 camera devices * fix(nixpak): expose V4L2 sysfs to OBS * fix(nixpak): expose NVIDIA encode library to OBS * docs(nixpak): record OBS interactive validation * docs(nixpak): record OBS RTMP validation * fix(nixpak): run MuseScore via XWayland and PulseAudio * docs(nixpak): explain app sandboxing rationale * fix(nixpak): route MuseScore ALSA through PipeWire
21 lines
333 B
Nix
21 lines
333 B
Nix
{
|
|
load,
|
|
mkAppPolicy,
|
|
...
|
|
}:
|
|
let
|
|
app = load "imv";
|
|
in
|
|
mkAppPolicy "imv" {
|
|
network = "none";
|
|
media = false;
|
|
pulse = false;
|
|
x11 = false;
|
|
notifications = false;
|
|
extraChecks = {
|
|
fileChooser = app.portalGroups.fileChooser;
|
|
openUri = app.portalGroups.openUri;
|
|
noAudio = !app.bubblewrap.sockets.pulse;
|
|
};
|
|
}
|