wip

kimat · Mar 12, 2024 · 4974ad4 · 4974ad4
1 parent a7e5eee
commit 4974ad4
Showing 1 changed file with 14 additions and 9 deletions.
diff --git a/nixos/modules/services/desktops/espanso.nix b/nixos/modules/services/desktops/espanso.nix
@@ -21,20 +21,25 @@ in {
       serviceConfig = {
         ExecStart = "${cfg.package}/bin/espanso daemon";
         Restart = "on-failure";
-        CapabilityBoundingSet = [ "cap_dac_override+p" ];
-        AmbientCapabilites = [ "cap_dac_override+p" ];
+        # CapabilityBoundingSet = "CAP_DAC_OVERRIDE";
+        # CapabilityBoundingSet =
+        #   [ "CAP_CHOWN" "CAP_FOWNER" "CAP_DAC_OVERRIDE" "CAP_DAC_READ_SEARCH" ];
+        # CapabilityBoundingSet = [ "cap_dac_override+p" ];
+        # AmbientCapabilites = [ "cap_dac_override+p" ];
+        CapabilityBoundingSet = [ "~" ];
+        AmbientCapabilites = [ "~" ];
       };
       wantedBy = [ "default.target" ];
     };
 
     environment.systemPackages = [ cfg.package ];
 
-    security.wrappers.espanso = {
-      source = "${pkgs.espanso-wayland}/bin/espanso";
-      capabilities = "cap_dac_override+p";
-      owner = "root";
-      group = "users";
-      permissions = "u+rw,g+rw";
-    };
+    # security.wrappers.espanso = {
+    #   source = "${cfg.package}/bin/espanso";
+    #   capabilities = "cap_dac_override+p";
+    #   owner = "root";
+    #   group = "users";
+    #   # permissions = "u+rw,g+rw";
+    # };
   };
 }