···

       
7
       
7
       
 
       
  sandbox = pkgs.chromium.sandbox;

     

       
8
       
8
       
 
       
in

     

       
9
       
9
       
 
       
{

     

       
10
       
10
       
-
       
  options.security.chromiumSuidSandbox.enable = mkEnableOption ''

     

       
11
       
11
       
-
       
    Whether to install the Chromium SUID sandbox which is an executable that

     

       
12
       
12
       
-
       
    Chromium may use in order to achieve sandboxing.

     

       
10
       
10
       
+
       
  options.security.chromiumSuidSandbox.enable = mkOption {

     

       
11
       
11
       
+
       
    type = types.bool;

     

       
12
       
12
       
+
       
    default = false;

     

       
13
       
13
       
+
       
    description = ''

     

       
14
       
14
       
+
       
      Whether to install the Chromium SUID sandbox which is an executable that

     

       
15
       
15
       
+
       
      Chromium may use in order to achieve sandboxing.

     

       
13
       
16
       
 
       


     

       
14
       
14
       
-
       
    If you get the error "The SUID sandbox helper binary was found, but is not

     

       
15
       
15
       
-
       
    configured correctly.", turning this on might help.

     

       
17
       
17
       
+
       
      If you get the error "The SUID sandbox helper binary was found, but is not

     

       
18
       
18
       
+
       
      configured correctly.", turning this on might help.

     

       
16
       
19
       
 
       


     

       
17
       
17
       
-
       
    Also, if the URL chrome://sandbox tells you that "You are not adequately

     

       
18
       
18
       
-
       
    sandboxed!", turning this on might resolve the issue.

     

       
20
       
20
       
+
       
      Also, if the URL chrome://sandbox tells you that "You are not adequately

     

       
21
       
21
       
+
       
      sandboxed!", turning this on might resolve the issue.

     

       
19
       
22
       
 
       


     

       
20
       
20
       
-
       
    Finally, if you have <option>security.grsecurity</option> enabled and you

     

       
21
       
21
       
-
       
    use Chromium, you probably need this.

     

       
22
       
22
       
-
       
  '';

     

       
23
       
23
       
+
       
      Finally, if you have <option>security.grsecurity</option> enabled and you

     

       
24
       
24
       
+
       
      use Chromium, you probably need this.

     

       
25
       
25
       
+
       
    '';

     

       
26
       
26
       
+
       
  };

     

       
23
       
27
       
 
       


     

       
24
       
28
       
 
       
  config = mkIf cfg.enable {

     

       
25
       
29
       
 
       
    environment.systemPackages = [ sandbox ];