aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDrew DeVault <sir@cmpwn.com>2017-07-11 10:19:28 -0400
committerGitHub <noreply@github.com>2017-07-11 10:19:28 -0400
commitdf17a268b92aef2ff0fbcc14d7a2457cbb0968b1 (patch)
tree32c1c0b1782486980401fc0ea6c20bdf799b1070
parent8fad213f346daee628c0548f9a06179f602ada3a (diff)
parenta3c07273ba5c1f786271655ebd47468b1a225e9c (diff)
downloadsway-df17a268b92aef2ff0fbcc14d7a2457cbb0968b1.tar.xz
Merge pull request #1271 from johalun/master-securityconf-freebsd
Add secucity config for FreeBSD.
-rw-r--r--security.d/10-freebsd.in12
-rw-r--r--sway/CMakeLists.txt4
2 files changed, 16 insertions, 0 deletions
diff --git a/security.d/10-freebsd.in b/security.d/10-freebsd.in
new file mode 100644
index 00000000..de405f70
--- /dev/null
+++ b/security.d/10-freebsd.in
@@ -0,0 +1,12 @@
+# sway security rules
+#
+# FreeBSD does not support getting client PID from server side
+# so we can not know the path to the client's binary.
+#
+# The solution for now is to be permissive and allow all
+# features by default for any client.
+
+# Configures enabled compositor features for specific programs
+permit * fullscreen keyboard mouse background screenshot panel lock
+
+
diff --git a/sway/CMakeLists.txt b/sway/CMakeLists.txt
index bf0b2e7f..61c22b84 100644
--- a/sway/CMakeLists.txt
+++ b/sway/CMakeLists.txt
@@ -93,6 +93,10 @@ endfunction()
add_config(config config sway)
add_config(00-defaults security.d/00-defaults sway/security.d)
+if (CMAKE_SYSTEM_NAME STREQUAL FreeBSD)
+ add_config(10-freebsd security.d/10-freebsd sway/security.d)
+endif (CMAKE_SYSTEM_NAME STREQUAL FreeBSD)
+
if (A2X_FOUND)
add_manpage(sway 1)
add_manpage(sway 5)