sway

commit aa48b926be21bfe9713a9caf36ce10b5345e50ab
parent 0f11aa037ad8765abf66e0c90052f9e4c37d56db
Author: Érico Rolim <erico.erc@gmail.com>
Date:   Thu, 14 May 2020 02:28:22 -0300

security.d: remove directory

Remove the entries from meson.build as well.

Diffstat:
M
meson.build
 | 
16
----------------
D
security.d/00-defaults.in
 | 
50
--------------------------------------------------
D
security.d/10-freebsd.in
 | 
19
-------------------

3 files changed, 0 insertions(+), 85 deletions(-)
diff --git a/meson.build b/meson.build
@@ -209,22 +209,6 @@ configure_file(
 	install_dir: join_paths(sysconfdir, 'sway')
 )
 
-if is_freebsd
-	configure_file(
-		configuration: config,
-		input: 'security.d/10-freebsd.in',
-		output: '@BASENAME@',
-		install_dir: join_paths(sysconfdir, 'sway', 'security.d')
-	)
-else
-	configure_file(
-		configuration: config,
-		input: 'security.d/00-defaults.in',
-		output: '@BASENAME@',
-		install_dir: join_paths(sysconfdir, 'sway', 'security.d')
-	)
-endif
-
 install_data(
 	'sway.desktop',
 	install_dir: join_paths(datadir, 'wayland-sessions')
diff --git a/security.d/00-defaults.in b/security.d/00-defaults.in
@@ -1,50 +0,0 @@
-# sway security rules
-#
-# Read sway-security(7) for details on how to secure your sway install.
-#
-# You MUST read this man page if you intend to attempt to secure your sway
-# installation.
-#
-# DO NOT CHANGE THIS FILE. Override these defaults by writing new files in
-# @sysconfdir@/sway/security.d/*
-
-# Configures enabled compositor features for specific programs
-permit * fullscreen keyboard mouse
-permit @prefix@/bin/swaylock lock
-permit @prefix@/bin/swaybg background
-permit @prefix@/bin/swaybar panel
-
-# Configures enabled IPC features for specific programs
-ipc @prefix@/bin/swaymsg {
-    * enabled
-
-    events {
-        * disabled
-    }
-}
-
-ipc @prefix@/bin/swaybar {
-    bar-config enabled
-    outputs enabled
-    workspaces enabled
-    command enabled
-
-    events {
-        workspace enabled
-        mode enabled
-    }
-}
-
-ipc @prefix@/bin/swaylock {
-    outputs enabled
-}
-
-# Limits the contexts from which certain commands are permitted
-commands {
-    * all
-
-    fullscreen binding criteria
-    bindsym config
-    exit binding
-    kill binding
-}
diff --git a/security.d/10-freebsd.in b/security.d/10-freebsd.in
@@ -1,19 +0,0 @@
-# sway security rules
-#
-# FreeBSD does not support getting client PID from server side
-# so we can not know the path to the client's binary.
-#
-# The solution for now is to be permissive and allow all
-# features by default for any client.
-
-# Configures enabled compositor features for specific programs
-permit * fullscreen keyboard mouse background screenshot panel lock 
-
-ipc * {
-   * enabled
-   events {
-     * enabled
-   }
-}
-
-