programs: firefox-xdg-open: restrict dbus

2025-01-10 00:33:51 +00:00
parent b40d2cc2a5
commit 133f8703dc
1 changed files with 3 additions and 1 deletions
--- a/hosts/common/programs/firefox-xdg-open.nix
+++ b/hosts/common/programs/firefox-xdg-open.nix
@@ -3,7 +3,9 @@
  sane.programs.firefox-xdg-open = {
    packageUnwrapped = pkgs.firefox-extensions.firefox-xdg-open.systemComponent;

-    sandbox.whitelistDbus.user = true;  #< TODO: reduce  # for xdg-open/portals
+    sandbox.whitelistPortal = [
+      "OpenURI"
+    ];

    mime.associations."x-scheme-handler/xdg-open" = "xdg-open.desktop";