···7 sandbox = pkgs.chromium.sandbox;
8in
9{
10- options.security.chromiumSuidSandbox.enable = mkEnableOption ''
11- Whether to install the Chromium SUID sandbox which is an executable that
12- Chromium may use in order to achieve sandboxing.
0001314- If you get the error "The SUID sandbox helper binary was found, but is not
15- configured correctly.", turning this on might help.
1617- Also, if the URL chrome://sandbox tells you that "You are not adequately
18- sandboxed!", turning this on might resolve the issue.
1920- Finally, if you have <option>security.grsecurity</option> enabled and you
21- use Chromium, you probably need this.
22- '';
02324 config = mkIf cfg.enable {
25 environment.systemPackages = [ sandbox ];
···7 sandbox = pkgs.chromium.sandbox;
8in
9{
10+ options.security.chromiumSuidSandbox.enable = mkOption {
11+ type = types.bool;
12+ default = false;
13+ description = ''
14+ Whether to install the Chromium SUID sandbox which is an executable that
15+ Chromium may use in order to achieve sandboxing.
1617+ If you get the error "The SUID sandbox helper binary was found, but is not
18+ configured correctly.", turning this on might help.
1920+ Also, if the URL chrome://sandbox tells you that "You are not adequately
21+ sandboxed!", turning this on might resolve the issue.
2223+ Finally, if you have <option>security.grsecurity</option> enabled and you
24+ use Chromium, you probably need this.
25+ '';
26+ };
2728 config = mkIf cfg.enable {
29 environment.systemPackages = [ sandbox ];