programs: foliate: restrict dbus

2025-01-10 11:24:36 +00:00
parent 06840bde34
commit 5ea4e07847
1 changed files with 5 additions and 1 deletions
--- a/hosts/common/programs/foliate.nix
+++ b/hosts/common/programs/foliate.nix
@@ -3,8 +3,12 @@
 {
  sane.programs.foliate = {
    sandbox.net = "clearnet";  #< for dictionary, wikipedia, online book libraries
-    sandbox.whitelistDbus.user = true;  #< TODO: reduce  #< when clicking on links
+    sandbox.whitelistDbus.user.own = [ "com.github.johnfactotum.Foliate" ];
    sandbox.whitelistDri = true;  # reduces startup time and subjective page flip time
+    sandbox.whitelistPortal = [
+      "FileChooser"
+      "OpenURI"
+    ];
    sandbox.whitelistWayland = true;
    sandbox.extraHomePaths = [
      "Books/Books"