From aa48b926be21bfe9713a9caf36ce10b5345e50ab Mon Sep 17 00:00:00 2001
From: Érico Rolim <erico.erc@gmail.com>
Date: Thu, 14 May 2020 02:28:22 -0300
Subject: security.d: remove directory
Remove the entries from meson.build as well.
---
meson.build | 16 ---------------
security.d/00-defaults.in | 50 -----------------------------------------------
security.d/10-freebsd.in | 19 ------------------
3 files changed, 85 deletions(-)
delete mode 100644 security.d/00-defaults.in
delete mode 100644 security.d/10-freebsd.in
diff --git a/meson.build b/meson.build
index 75e06e3d..54484cec 100644
--- a/meson.build
+++ b/meson.build
@@ -209,22 +209,6 @@ configure_file(
install_dir: join_paths(sysconfdir, 'sway')
)
-if is_freebsd
- configure_file(
- configuration: config,
- input: 'security.d/10-freebsd.in',
- output: '@BASENAME@',
- install_dir: join_paths(sysconfdir, 'sway', 'security.d')
- )
-else
- configure_file(
- configuration: config,
- input: 'security.d/00-defaults.in',
- output: '@BASENAME@',
- install_dir: join_paths(sysconfdir, 'sway', 'security.d')
- )
-endif
-
install_data(
'sway.desktop',
install_dir: join_paths(datadir, 'wayland-sessions')
diff --git a/security.d/00-defaults.in b/security.d/00-defaults.in
deleted file mode 100644
index be7b9d06..00000000
--- a/security.d/00-defaults.in
+++ /dev/null
@@ -1,50 +0,0 @@
-# sway security rules
-#
-# Read sway-security(7) for details on how to secure your sway install.
-#
-# You MUST read this man page if you intend to attempt to secure your sway
-# installation.
-#
-# DO NOT CHANGE THIS FILE. Override these defaults by writing new files in
-# @sysconfdir@/sway/security.d/*
-
-# Configures enabled compositor features for specific programs
-permit * fullscreen keyboard mouse
-permit @prefix@/bin/swaylock lock
-permit @prefix@/bin/swaybg background
-permit @prefix@/bin/swaybar panel
-
-# Configures enabled IPC features for specific programs
-ipc @prefix@/bin/swaymsg {
- * enabled
-
- events {
- * disabled
- }
-}
-
-ipc @prefix@/bin/swaybar {
- bar-config enabled
- outputs enabled
- workspaces enabled
- command enabled
-
- events {
- workspace enabled
- mode enabled
- }
-}
-
-ipc @prefix@/bin/swaylock {
- outputs enabled
-}
-
-# Limits the contexts from which certain commands are permitted
-commands {
- * all
-
- fullscreen binding criteria
- bindsym config
- exit binding
- kill binding
-}
diff --git a/security.d/10-freebsd.in b/security.d/10-freebsd.in
deleted file mode 100644
index 533b526a..00000000
--- a/security.d/10-freebsd.in
+++ /dev/null
@@ -1,19 +0,0 @@
-# sway security rules
-#
-# FreeBSD does not support getting client PID from server side
-# so we can not know the path to the client's binary.
-#
-# The solution for now is to be permissive and allow all
-# features by default for any client.
-
-# Configures enabled compositor features for specific programs
-permit * fullscreen keyboard mouse background screenshot panel lock
-
-ipc * {
- * enabled
- events {
- * enabled
- }
-}
-
-
--
cgit v1.2.3