colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

sane-open: restrict dbus

Browse Source
This commit is contained in:
Colin
2025-01-10 00:22:42 +00:00
parent a3ebeb0543
commit 14b475a0a6
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
hosts/common/programs/sane-open.nix
View File

@@ -7,12 +7,15 @@
]; ];
sandbox.autodetectCliPaths = "existing"; # for when opening a file sandbox.autodetectCliPaths = "existing"; # for when opening a file
sandbox.whitelistDbus.user = true; #< TODO: reduce
sandbox.keepPidsAndProc = true; #< to toggle keyboard
sandbox.extraHomePaths = [ sandbox.extraHomePaths = [
".local/share/applications" ".local/share/applications"
]; ];
sandbox.extraRuntimePaths = [ "sway" ]; #< calls `swaymsg` to query rotation and see if there's room for a keyboard sandbox.extraRuntimePaths = [ "sway" ]; #< calls `swaymsg` to query rotation and see if there's room for a keyboard
sandbox.keepPidsAndProc = true; #< to toggle keyboard
sandbox.whitelistPortal = [
"DynamicLauncher"
"OpenURI"
];
mime.associations."application/x-desktop" = "sane-open-desktop.desktop"; mime.associations."application/x-desktop" = "sane-open-desktop.desktop";
}; };