From af90c204cf2e5691835005c470522ffcf39dff32 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <pngwjpgh@users.noreply.github.com>
Date: Sun, 4 Sep 2016 19:36:13 +0200
Subject: media can only access /var/media

---
 hel.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/hel.nix b/hel.nix
index 3dfbe6f4..3ab495b7 100644
--- a/hel.nix
+++ b/hel.nix
@@ -109,6 +109,7 @@
           AllowStreamLocalForwarding no
           X11Forwarding no
           AllowAgentForwarding no
+          ChrootDirectory %h
       '';
     };
 
-- 
cgit v1.2.3