From 29bc1608aaf4f742cbd1b8c39f99d3b8f03d2d98 Mon Sep 17 00:00:00 2001 From: Colin Date: Wed, 29 May 2024 16:12:49 +0000 Subject: [PATCH] sway: remove sandbox input which are no longer necessary --- TODO.md | 1 - hosts/common/programs/sway/default.nix | 4 ++-- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/TODO.md b/TODO.md index 47e6fbcd..4a0e5154 100644 --- a/TODO.md +++ b/TODO.md @@ -17,7 +17,6 @@ - decrease s6 restart time? - `ssh` access doesn't grant same linux capabilities as login - ringer (i.e. dino incoming call) doesn't prevent moby from sleeping -- sway mouse/kb hotplug doesn't work - sysvol (volume overlay): when casting with `blast`, sysvol doesn't react to volume changes - moby: kaslr is effectively disabled - `dmesg | grep "KASLR disabled due to lack of seed"` diff --git a/hosts/common/programs/sway/default.nix b/hosts/common/programs/sway/default.nix index 70daaea5..de64f314 100644 --- a/hosts/common/programs/sway/default.nix +++ b/hosts/common/programs/sway/default.nix @@ -179,9 +179,9 @@ in sandbox.whitelistWayland = true; sandbox.extraRuntimePaths = [ "/" ]; # TODO: should need just "sway". but even if i sandbox EVERY entry under run individually, it fails! sandbox.extraPaths = [ - "/dev/input" + # "/dev/input" "/run/seatd.sock" #< required if not using `logind` systemd login manager - "/run/systemd/sessions" #< TODO: remove + # "/run/systemd/sessions" "/run/udev" "/sys/class/backlight" "/sys/class/drm"