pyrox.dev
chromium-suid-sandbox module: fix description
+14
-10
nixos/modules/security/chromium-suid-sandbox.nix
+14
-10
nixos/modules/security/chromium-suid-sandbox.nix
···
7
7
sandbox = pkgs.chromium.sandbox;
8
8
in
9
9
{
10
-
options.security.chromiumSuidSandbox.enable = mkEnableOption ''
11
-
Whether to install the Chromium SUID sandbox which is an executable that
12
-
Chromium may use in order to achieve sandboxing.
10
+
options.security.chromiumSuidSandbox.enable = mkOption {
11
+
type = types.bool;
12
+
default = false;
13
+
description = ''
14
+
Whether to install the Chromium SUID sandbox which is an executable that
15
+
Chromium may use in order to achieve sandboxing.
13
16
14
-
If you get the error "The SUID sandbox helper binary was found, but is not
15
-
configured correctly.", turning this on might help.
17
+
If you get the error "The SUID sandbox helper binary was found, but is not
18
+
configured correctly.", turning this on might help.
16
19
17
-
Also, if the URL chrome://sandbox tells you that "You are not adequately
18
-
sandboxed!", turning this on might resolve the issue.
20
+
Also, if the URL chrome://sandbox tells you that "You are not adequately
21
+
sandboxed!", turning this on might resolve the issue.
19
22
20
-
Finally, if you have <option>security.grsecurity</option> enabled and you
21
-
use Chromium, you probably need this.
22
-
'';
23
+
Finally, if you have <option>security.grsecurity</option> enabled and you
24
+
use Chromium, you probably need this.
25
+
'';
26
+
};
23
27
24
28
config = mkIf cfg.enable {
25
29
environment.systemPackages = [ sandbox ];