colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

sway: remove sandbox input which are no longer necessary

Browse Source
This commit is contained in:
Colin
2024-05-29 16:12:49 +00:00
parent 635ca1e5d8
commit 29bc1608aa
2 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
TODO.md
View File

@@ -17,7 +17,6 @@
- decrease s6 restart time? - decrease s6 restart time?
- `ssh` access doesn't grant same linux capabilities as login - `ssh` access doesn't grant same linux capabilities as login
- ringer (i.e. dino incoming call) doesn't prevent moby from sleeping - ringer (i.e. dino incoming call) doesn't prevent moby from sleeping
- sway mouse/kb hotplug doesn't work
- sysvol (volume overlay): when casting with `blast`, sysvol doesn't react to volume changes - sysvol (volume overlay): when casting with `blast`, sysvol doesn't react to volume changes
- moby: kaslr is effectively disabled - moby: kaslr is effectively disabled
- `dmesg | grep "KASLR disabled due to lack of seed"` - `dmesg | grep "KASLR disabled due to lack of seed"`

4
hosts/common/programs/sway/default.nix
View File

@@ -179,9 +179,9 @@ in
sandbox.whitelistWayland = true; sandbox.whitelistWayland = true;
sandbox.extraRuntimePaths = [ "/" ]; # TODO: should need just "sway". but even if i sandbox EVERY entry under run individually, it fails! sandbox.extraRuntimePaths = [ "/" ]; # TODO: should need just "sway". but even if i sandbox EVERY entry under run individually, it fails!
sandbox.extraPaths = [ sandbox.extraPaths = [
"/dev/input" # "/dev/input"
"/run/seatd.sock" #< required if not using `logind` systemd login manager "/run/seatd.sock" #< required if not using `logind` systemd login manager
"/run/systemd/sessions" #< TODO: remove # "/run/systemd/sessions"
"/run/udev" "/run/udev"
"/sys/class/backlight" "/sys/class/backlight"
"/sys/class/drm" "/sys/class/drm"