programs: portfolio: restrict dbus

2025-01-10 11:22:03 +00:00
parent b1690b5d8c
commit fe149e699e
1 changed files with 4 additions and 1 deletions
--- a/hosts/common/programs/portfolio-filemanager.nix
+++ b/hosts/common/programs/portfolio-filemanager.nix
@@ -2,7 +2,10 @@
 {
  sane.programs.portfolio-filemanager = {
    # this is all taken pretty directly from nautilus config
-    sandbox.whitelistDbus.user = true;  #< TODO: reduce  # for portals launching apps
+    sandbox.whitelistDbus.user.own = [ "dev.tchx84.Portfolio" ];
+    sandbox.whitelistPortal = [
+      "OpenURI"
+    ];
    sandbox.whitelistWayland = true;
    sandbox.extraHomePaths = [
      # grant access to pretty much everything, except for secret keys.