Add the configure app

updates.d/72-sandbox.sh

@@ -0,0 +1,16 @@
+#!/bin/bash
+
+COREDESKTOP="$HOME/.local/share/coredesktop"
+
+run_update() {
+  local status=0
+  bash "$COREDESKTOP/sandbox/setup.sh" || status=1
+
+  # The real command, not the sandboxed one in sandbox/bin: updating Hermes
+  # writes outside what its sandbox allows
+  if [ -x "$HOME/.local/bin/hermes" ]; then
+    echo "Updating Hermes Agent..."
+    "$HOME/.local/bin/hermes" update < /dev/null || status=1
+  fi
+  return $status
+}