about summary refs log tree commit diff
path: root/pkgs/tools/networking/cloudflare-warp/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'pkgs/tools/networking/cloudflare-warp/default.nix')
-rw-r--r--pkgs/tools/networking/cloudflare-warp/default.nix6
1 files changed, 6 insertions, 0 deletions
diff --git a/pkgs/tools/networking/cloudflare-warp/default.nix b/pkgs/tools/networking/cloudflare-warp/default.nix
index 4a0f842071369..0f6207a53e755 100644
--- a/pkgs/tools/networking/cloudflare-warp/default.nix
+++ b/pkgs/tools/networking/cloudflare-warp/default.nix
@@ -73,6 +73,12 @@ stdenv.mkDerivation rec {
     substituteInPlace $out/lib/systemd/user/warp-taskbar.service \
       --replace "ExecStart=" "ExecStart=$out"
 
+    cat >>$out/lib/systemd/user/warp-taskbar.service <<EOF
+
+    [Service]
+    BindReadOnlyPaths=$out:/usr:
+    EOF
+
     runHook postInstall
   '';