projects
/
bubblebox.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
|
inline
| side by side (from parent 1:
8805de0
)
don't change hostname, it doesn't work well for GUI apps under Gnome
master
author
Ralf Jung
<post@ralfj.de>
Fri, 9 Aug 2024 09:22:55 +0000
(11:22 +0200)
committer
Ralf Jung
<post@ralfj.de>
Fri, 9 Aug 2024 09:22:55 +0000
(11:22 +0200)
profiles.py
patch
|
blob
|
history
diff --git
a/profiles.py
b/profiles.py
index 57dc01000a5d2aaecdc511cc6d49068f47daa7e6..d2d78413ee8ef36d2e1dcb4b496ba145577cd2c4 100644
(file)
--- a/
profiles.py
+++ b/
profiles.py
@@
-7,7
+7,8
@@
DEFAULT = group(
bwrap_flags("--unshare-user", "--unshare-pid", "--unshare-cgroup"),
# A different hostname is useful to be able to see when we are inside the sandbox.
# However, some applications will not like this unless the hostname also exists in `/etc/hosts`!
bwrap_flags("--unshare-user", "--unshare-pid", "--unshare-cgroup"),
# A different hostname is useful to be able to see when we are inside the sandbox.
# However, some applications will not like this unless the hostname also exists in `/etc/hosts`!
- bwrap_flags("--unshare-uts", "--hostname", "bubblebox"),
+ # Also, gnome-shell doesn't display window icons properly when this is set.
+ #bwrap_flags("--unshare-uts", "--hostname", "bubblebox"),
# Make sure the sandbox cannot inject commands into the host terminal.
# TODO: This flag breaks some CLI applications, like job control in shells.
# Consider using SECCOMP instead.
# Make sure the sandbox cannot inject commands into the host terminal.
# TODO: This flag breaks some CLI applications, like job control in shells.
# Consider using SECCOMP instead.