colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity
5,059 Commits 125 Branches 1 Tag 13 MiB
838c6d7dc8
Commit Graph

637 Commits

Author SHA1 Message Date
Colin
838c6d7dc8 programs: swaync: sandbox 2024-02-15 16:38:38 +00:00
Colin
9d706df5b5 programs: waybar: narrow the /run/user paths to just sway-ipc.sock 2024-02-15 14:40:01 +00:00
Colin
24d23f7903 programs: bemenu: fix sandboxing 2024-02-15 14:33:20 +00:00
Colin
5090c4e88c sway: define without using nixos "programs.sway" 
motivation was to leverage 'sane.programs.sway.env' to statically configure SWAYSOCK. i think that's still the right way: we'll see
 2024-02-15 14:25:27 +00:00
Colin
081114da65 programs: waybar: sandbox in a way that works well for moby too 2024-02-15 13:16:18 +00:00
Colin
02b7586ffa programs: komikku: add dbus to the sandbox to fix it 2024-02-15 11:58:08 +00:00
Colin
25dcb7f89a programs: open-in-mpv: document that upstream merged my PR 2024-02-15 11:38:37 +00:00
Colin
88f1d63b6e firefox: properly integrate xdg-desktop-portal for opening media 2024-02-15 11:36:50 +00:00
Colin
d36e269edd programs: loupe: remove the dbus services to make it work with Firefox 2024-02-15 11:36:24 +00:00
Colin
582a003739 programs: waybar: fix battery indicator within sandbox 2024-02-15 10:35:24 +00:00
Colin
df60be8c61 open-in-mpv: sandbox with bwrap 2024-02-15 09:49:03 +00:00
Colin
e8b4c36442 programs: nautilus: specify inode/directory mime association 2024-02-15 09:48:26 +00:00
Colin
2f699737f5 firefox: fix open-in-mpv integration 
two parts: add open-in-mpv's config to firefox's sandbox; patch open-in-mpv to forward to xdg-open
 2024-02-15 09:14:57 +00:00
Colin
4a3d24be3f waybar: migrate all config to "sane.programs" 2024-02-15 07:18:12 +00:00
Colin
10feb319fe sway: lift waybar to own file and sandbox it 2024-02-15 02:33:40 +00:00
Colin
b2fcf6fdfd programs: messengers (fractal, signal, dino, tuba): add media libraries to the sandbox 2024-02-15 00:49:24 +00:00
Colin
dcc2eb265d programs: re-enable sandbox for tumiki-fighters and losslesscut (X applications) 2024-02-15 00:09:40 +00:00
Colin
518c3afd07 programs: sandbox: disable losslesscut/tumiki-fighters sandbox until i can figure out Xwayland 2024-02-14 14:37:59 +00:00
Colin
90dee85664 programs: sort alphabetically 2024-02-14 14:28:22 +00:00
Colin
26fc283fd9 programs: losslesscut: sandbox 2024-02-14 14:26:56 +00:00
Colin
d0430ce1e9 programs: pavucontrol/pwvucontrol: enable audio devices inside the sandbox 2024-02-14 14:26:56 +00:00
Colin
368a52b91e programs: speedtest-cli: sandbox with bwrap 2024-02-14 14:26:56 +00:00
Colin
d90dacee1f programs: grimshot: sandbox with bwrap 2024-02-14 14:17:41 +00:00
Colin
a6e2b3bc5c programs: xdg-terminal-exec: disable sandbox 2024-02-14 14:11:35 +00:00
Colin
8863a3c674 programs: wob: sandbox with bwrap 2024-02-14 14:10:20 +00:00
Colin
fa8d6dbb9f programs: wob: fix config substitution 2024-02-14 14:04:54 +00:00
Colin
e5e79a6b60 programs: FileMimeInfo: disable sandbox 2024-02-14 13:54:21 +00:00
Colin
95f7eeeb5c programs: libnotify: sandbox with bwrap 2024-02-14 13:49:48 +00:00
Colin
29d638c68b programs: dig: sandbox with bwrap 2024-02-14 13:47:44 +00:00
Colin
7d22a5466f programs: zsh: fix "switch" function to be friendly to sandboxing 2024-02-14 13:45:56 +00:00
Colin
5907d9fa42 Revert "xdg-desktop-portal-gtk: build without support for notifications" 
This reverts commit c9e02bfd8a.

disable notifications at this level did not cause fractal (gtk app) to
send its notifications to swaync. instead, it still tried to deliver to
the Portal, where the Portal wasn't expecting anything and just returned
an error to fractal.

setting `GNOTIFICATION_BACKEND = "freedesktop"` seems to be the correct
way to get gtk apps to behave as desired with their notifications.
 2024-02-14 11:09:37 +00:00
Colin
67fe8d4666 swaync: propagate GNOTIFICATION_BACKEND = "freedesktop" to all users 2024-02-14 11:09:20 +00:00
Colin
c9e02bfd8a xdg-desktop-portal-gtk: build without support for notifications 2024-02-14 10:51:18 +00:00
Colin
03b58b3cab programs: vim: support system copy/paste inside of sandbox 2024-02-14 09:11:31 +00:00
Colin
ae01c17c05 programs: splatmoji: fix to work inside a sandbox again 2024-02-14 09:11:12 +00:00
Colin
677e6e679b programs: sandbox {s,}waylock lockscreen 2024-02-14 08:48:03 +00:00
Colin
3eb47a9a8d programs: swaylock: *partially* sandbox with capsh 2024-02-14 05:46:36 +00:00
Colin
f11e443678 programs: waylock: *partially* sandbox with capsh 2024-02-14 05:46:28 +00:00
Colin
8f8ec090c4 programs: add "waylock" 2024-02-14 05:01:33 +00:00
Colin
e174eaeff0 programs: loupe: fix sandboxing 2024-02-14 04:32:10 +00:00
Colin
f12b7afa1e programs: mimeo: dont sandbox 2024-02-14 01:51:26 +00:00
Colin
080bd856ec programs: sandboxing: only permit wayland socket access to those specific apps which require it 2024-02-14 01:49:49 +00:00
Colin
2d7c5b9fa5 programs: mpv: explicitly add Videos/servo, Books/servo to sandbox 2024-02-13 15:38:57 +00:00
Colin
83cb29aeeb xdg-utils: re-add mimetype package 2024-02-13 12:31:04 +00:00
Colin
1a18ed533b programs: don't include dbus in the sandbox by default 2024-02-13 11:58:33 +00:00
Colin
18eec98cae programs: brightnessctl: switch to landlock 2024-02-13 11:58:33 +00:00
Colin
82c386a6a4 programs: tor-browser-bundle-bin -> tor-browser 
they're the same (aliased), only my programs API expects 'tor-browser' specifically
 2024-02-13 11:58:33 +00:00
Colin
634dc318cd programs: spotify: remove old/unused firejail config 2024-02-13 11:15:30 +00:00
Colin
6eaaeeb91a programs: remove audio from the sandbox by default 2024-02-13 11:14:38 +00:00
Colin
94be4a7551 programs: wob: fix service definition (Exec -> ExecStart) 2024-02-13 11:03:18 +00:00