diff options
| -rw-r--r-- | meson.build | 16 | ||||
| -rw-r--r-- | security.d/00-defaults.in | 50 | ||||
| -rw-r--r-- | security.d/10-freebsd.in | 19 |
3 files changed, 0 insertions, 85 deletions
diff --git a/meson.build b/meson.build index 75e06e3d..54484cec 100644 --- a/meson.build +++ b/meson.build @@ -209,22 +209,6 @@ configure_file( install_dir: join_paths(sysconfdir, 'sway') ) -if is_freebsd - configure_file( - configuration: config, - input: 'security.d/10-freebsd.in', - output: '@BASENAME@', - install_dir: join_paths(sysconfdir, 'sway', 'security.d') - ) -else - configure_file( - configuration: config, - input: 'security.d/00-defaults.in', - output: '@BASENAME@', - install_dir: join_paths(sysconfdir, 'sway', 'security.d') - ) -endif - install_data( 'sway.desktop', install_dir: join_paths(datadir, 'wayland-sessions') diff --git a/security.d/00-defaults.in b/security.d/00-defaults.in deleted file mode 100644 index be7b9d06..00000000 --- a/security.d/00-defaults.in +++ /dev/null @@ -1,50 +0,0 @@ -# sway security rules -# -# Read sway-security(7) for details on how to secure your sway install. -# -# You MUST read this man page if you intend to attempt to secure your sway -# installation. -# -# DO NOT CHANGE THIS FILE. Override these defaults by writing new files in -# @sysconfdir@/sway/security.d/* - -# Configures enabled compositor features for specific programs -permit * fullscreen keyboard mouse -permit @prefix@/bin/swaylock lock -permit @prefix@/bin/swaybg background -permit @prefix@/bin/swaybar panel - -# Configures enabled IPC features for specific programs -ipc @prefix@/bin/swaymsg { - * enabled - - events { - * disabled - } -} - -ipc @prefix@/bin/swaybar { - bar-config enabled - outputs enabled - workspaces enabled - command enabled - - events { - workspace enabled - mode enabled - } -} - -ipc @prefix@/bin/swaylock { - outputs enabled -} - -# Limits the contexts from which certain commands are permitted -commands { - * all - - fullscreen binding criteria - bindsym config - exit binding - kill binding -} diff --git a/security.d/10-freebsd.in b/security.d/10-freebsd.in deleted file mode 100644 index 533b526a..00000000 --- a/security.d/10-freebsd.in +++ /dev/null @@ -1,19 +0,0 @@ -# sway security rules -# -# FreeBSD does not support getting client PID from server side -# so we can not know the path to the client's binary. -# -# The solution for now is to be permissive and allow all -# features by default for any client. - -# Configures enabled compositor features for specific programs -permit * fullscreen keyboard mouse background screenshot panel lock - -ipc * { - * enabled - events { - * enabled - } -} - - |