colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

make-sandboxed: handl polkit files when patching bin paths

Browse Source
This commit is contained in:
Colin
2024-09-02 11:31:24 +00:00
parent 49a38001bc
commit 3deb17125d
1 changed files with 15 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
modules/programs/make-sandboxed.nix
View File

@@ -328,19 +328,24 @@ let
removeUnwanted "$outdir" ""
# fixup a few files i understand well enough
for binLoc in bin libexec sbin; do
for d in \
$outdir/etc/xdg/autostart/*.desktop \
$outdir/share/applications/*.desktop \
$outdir/share/dbus-1/{services,system-services}/*.service \
$outdir/{etc,lib,share}/systemd/{system,user}/*.service \
; do
# Exec: dbus and desktop files
# ExecStart,ExecReload: systemd service files
for key in Exec ExecStart ExecReload; do
for binLoc in bin libexec sbin; do
trySubstitute "$d" "Exec=%s/$binLoc/"
done
for d in $outdir/{etc,lib,share}/systemd/{system,user}/*.service; do
for key in ExecStart ExecReload; do
trySubstitute "$d" "$key=%s/$binLoc/"
done
done
for d in $outdir/share/polkit-1/actions/*.policy; do
trySubstitute "$d" '<annotate key="org.freedesktop.policykit.exec.path">'"%s/$binLoc/"
done
done
done
'';