programs: portfolio: restrict dbus

This commit is contained in:
2025-01-10 11:22:03 +00:00
parent b1690b5d8c
commit fe149e699e

View File

@@ -2,7 +2,10 @@
{ {
sane.programs.portfolio-filemanager = { sane.programs.portfolio-filemanager = {
# this is all taken pretty directly from nautilus config # this is all taken pretty directly from nautilus config
sandbox.whitelistDbus.user = true; #< TODO: reduce # for portals launching apps sandbox.whitelistDbus.user.own = [ "dev.tchx84.Portfolio" ];
sandbox.whitelistPortal = [
"OpenURI"
];
sandbox.whitelistWayland = true; sandbox.whitelistWayland = true;
sandbox.extraHomePaths = [ sandbox.extraHomePaths = [
# grant access to pretty much everything, except for secret keys. # grant access to pretty much everything, except for secret keys.