|
|
0ed7eb24fb
|
programs: assorted: remove legacy programs.feedback setting
|
2024-05-29 11:30:33 +00:00 |
|
|
|
ad8e75b6a3
|
programs: assorted: remove /var/lib/alsa persistence; doesnt seem to be needed
|
2024-05-29 11:30:33 +00:00 |
|
|
|
e8dbe0750d
|
networkmanager: fix sandbox to actually work with systemd-resolved
|
2024-05-29 10:34:24 +00:00 |
|
|
|
4309d887da
|
wpa_supplicant: remove unused services
|
2024-05-29 09:33:25 +00:00 |
|
|
|
1ee21c4795
|
NetworkManager: run as user instead of root
|
2024-05-29 09:16:30 +00:00 |
|
|
|
fb7bcbb5f5
|
NetworkManager-wait-online: fix missing sanebox path
|
2024-05-29 01:37:15 +00:00 |
|
|
|
0013e8305e
|
networkmanager: cleanup
|
2024-05-29 01:35:38 +00:00 |
|
|
|
7dedfcebb9
|
networkmanager: sandbox
|
2024-05-29 01:33:15 +00:00 |
|
|
|
247fc1f887
|
hosts/modules/gui: fold into hosts/common/programs
|
2024-05-28 16:51:02 +00:00 |
|
|
|
3c2ca46ef9
|
hosts/modules/gui/gtk: hoist to sane.programs.sane-theme
|
2024-05-28 16:44:27 +00:00 |
|
|
|
95dc395925
|
hosts/modules/gui/theme: lift my sway background up into its own package
|
2024-05-28 15:48:37 +00:00 |
|
|
|
cefd6c0534
|
documentation improvements
|
2024-05-28 13:36:01 +00:00 |
|
|
|
e8846b2d6b
|
wpa_supplicant: sandbox
|
2024-05-28 13:36:01 +00:00 |
|
|
|
7d242ab02c
|
sane-battery-estimate: sandbox
|
2024-05-28 09:41:04 +00:00 |
|
|
|
47611eaa26
|
sane-weather: sandbox
|
2024-05-28 09:38:04 +00:00 |
|
|
|
9719f0f785
|
mpv: relax sandboxing for the sake of subtitle downloading
|
2024-05-28 09:37:57 +00:00 |
|
|
|
8042ea76e6
|
assorted programs: specify sandbox.autodetectCliPaths variant more precisely than just true
|
2024-05-28 07:14:27 +00:00 |
|
|
|
c59236509b
|
sane-cast: sandbox
|
2024-05-28 07:07:11 +00:00 |
|
|
|
4ba0343315
|
networkmanager: hoist some lib.mkIfs up a few levels
would you believe one of these attributes was being set without a mkIf cfg.enabled guard :)
|
2024-05-28 05:27:23 +00:00 |
|
|
|
cbe6072c03
|
polyunfill: remove policykit suid wrappers
|
2024-05-28 05:24:37 +00:00 |
|
|
|
bea1fd95e5
|
polyunfill: disable dbus-daemon-launch-helper suid wrapper
|
2024-05-28 05:14:06 +00:00 |
|
|
|
ae544c0649
|
polyunfill: disable mount/umount suid wrappers
|
2024-05-28 05:02:26 +00:00 |
|
|
|
b571f70988
|
polyunfill: remove fusermount suid wrapper
|
2024-05-28 04:56:14 +00:00 |
|
|
|
e6498ad152
|
notejot: fix sandboxing
|
2024-05-28 03:59:31 +00:00 |
|
|
|
976b8ae45e
|
rofi-snippets: make the filtering case insensitive, and improve ellipsis placement come 1.7.6
|
2024-05-28 03:38:36 +00:00 |
|
|
|
ab7c4d7410
|
rofi-snippets: remove the subshell and just use a pipe
i expect that this is faster, particularly because bash should stand up each section of the pipeline in parallel, right?
|
2024-05-28 03:23:04 +00:00 |
|
|
|
d2c3bec98e
|
rofi-snippets: remove an extraneous layer of sandbox
|
2024-05-28 03:04:57 +00:00 |
|
|
|
3c5e5632ee
|
wtype: sandbox
|
2024-05-28 03:04:26 +00:00 |
|
|
|
dcedb8d3f0
|
sanebox: handle --flag=path style of autodetected paths
|
2024-05-28 03:04:02 +00:00 |
|
|
|
f38d2d52d2
|
alsa-ucm-pinephone-pmos: prefer the earpiece over the "internal speaker"
|
2024-05-27 14:13:56 +00:00 |
|
|
|
04bbf54385
|
alsa-ucm-conf: switch to postmarketos version
|
2024-05-27 13:41:03 +00:00 |
|
|
|
f2271180dd
|
alsa-ucm-conf: split the patched alsa confs out into their own package
|
2024-05-27 12:53:33 +00:00 |
|
|
|
60b1ab1429
|
conky: split sane-battery-estimate out into its own program
|
2024-05-27 11:33:40 +00:00 |
|
|
|
a024f685c3
|
firefox: replace i-still-dont-care-about-cookies extension with a uBlock filter list
simpler that way; fewer extensions to trust
|
2024-05-27 07:43:55 +00:00 |
|
|
|
9c20cef6ea
|
firefox: ublacklist: disable (i wasnt using any rules; it wasnt blocking anything from google search results)
|
2024-05-27 07:22:47 +00:00 |
|
|
|
f6f1a6e136
|
firefox: uBlock Origin: ship filter lists statically
|
2024-05-27 06:54:52 +00:00 |
|
|
|
7941a8b1ed
|
refactor: firefox: fix uBlock json indentation
|
2024-05-27 04:46:38 +00:00 |
|
|
|
063b0be5b6
|
hosts/modules/gui/greetd: remove
|
2024-05-27 00:44:01 +00:00 |
|
|
|
7e490f5c07
|
remove lingering references to sxmo
|
2024-05-27 00:38:30 +00:00 |
|
|
|
d46fa8a242
|
swaync-fbcli: sandbox (experimental)
|
2024-05-27 00:11:20 +00:00 |
|
|
|
62b2eb874c
|
swaync-service-dispatcher: sandbox
|
2024-05-27 00:07:30 +00:00 |
|
|
|
133c1b3699
|
swaync: remove unused systemd integrations
it's all s6 now
|
2024-05-27 00:06:03 +00:00 |
|
|
|
1b4300dbeb
|
swaync: remove unused vpn button
|
2024-05-27 00:00:44 +00:00 |
|
|
|
b1c7061b21
|
vpn: fix typos from previous 2 commits
|
2024-05-26 14:26:47 +00:00 |
|
|
|
002639cc76
|
ovpn: use a single key per-device
this should fix the traffic collisions i'm seeing with the existing setup
|
2024-05-26 14:04:52 +00:00 |
|
|
|
45967fde7b
|
brave: fix sandboxing under pasta/netns
|
2024-05-26 13:05:44 +00:00 |
|
|
|
3a045f4d88
|
doc: polyunfill: point to https://github.com/NixOS/nixpkgs/pull/314791
|
2024-05-26 08:00:18 +00:00 |
|
|
|
57d6a9a4c3
|
polyunfill: simplify pam hacks
|
2024-05-26 07:04:12 +00:00 |
|
|
|
2ee39ca0cc
|
poly_unfill: remove /run/wrappers/bin/unix_chkpwd
non-privileged users don't need to check passwords
well, maybe they do (for desktop unlockers), but i've already solved that :)
|
2024-05-26 06:37:59 +00:00 |
|
|
|
9d9211c5fa
|
polyunfill: distribute /run/wrappers/bin/unix_chkpwd without suid bit
|
2024-05-26 01:18:30 +00:00 |
|
