diff options
author | 2016-12-04 08:30:40 -0500 | |
---|---|---|
committer | 2016-12-04 08:30:40 -0500 | |
commit | 5778c59a2f302071fd781683db57a97b51396c87 (patch) | |
tree | e0ec272832e88e6c8d92719efa70c6749452daff /config.d | |
parent | Fix memory leaks in swaybar (diff) | |
parent | Disallow everything by default (diff) | |
download | sway-5778c59a2f302071fd781683db57a97b51396c87.tar.gz sway-5778c59a2f302071fd781683db57a97b51396c87.tar.zst sway-5778c59a2f302071fd781683db57a97b51396c87.zip |
Merge pull request #981 from SirCmpwn/security
Security features
Diffstat (limited to 'config.d')
-rw-r--r-- | config.d/security.in | 52 |
1 files changed, 52 insertions, 0 deletions
diff --git a/config.d/security.in b/config.d/security.in new file mode 100644 index 00000000..47592b05 --- /dev/null +++ b/config.d/security.in | |||
@@ -0,0 +1,52 @@ | |||
1 | # sway security rules | ||
2 | # | ||
3 | # Read sway-security(7) for details on how to secure your sway install. | ||
4 | # | ||
5 | # You MUST read this man page if you intend to attempt to secure your sway | ||
6 | # installation. | ||
7 | |||
8 | # Configures which programs are allowed to use which sway features | ||
9 | permit * fullscreen keyboard mouse ipc | ||
10 | permit __PREFIX__/bin/swaylock lock | ||
11 | permit __PREFIX__/bin/swaybar panel | ||
12 | permit __PREFIX__/bin/swaybg background | ||
13 | permit __PREFIX__/bin/swaygrab screenshot | ||
14 | |||
15 | # Configures which IPC features are enabled | ||
16 | ipc { | ||
17 | command enabled | ||
18 | outputs enabled | ||
19 | workspaces enabled | ||
20 | tree enabled | ||
21 | marks enabled | ||
22 | bar-config enabled | ||
23 | inputs enabled | ||
24 | |||
25 | events { | ||
26 | workspace enabled | ||
27 | output enabled | ||
28 | mode enabled | ||
29 | window enabled | ||
30 | modifier enabled | ||
31 | input enabled | ||
32 | binding disabled | ||
33 | } | ||
34 | } | ||
35 | |||
36 | # Limits the contexts from which certain commands are permitted | ||
37 | commands { | ||
38 | * all | ||
39 | |||
40 | fullscreen binding criteria | ||
41 | bindsym config | ||
42 | exit binding | ||
43 | kill binding | ||
44 | |||
45 | # You should not change these unless you know what you're doing - it could | ||
46 | # cripple your security | ||
47 | reload binding | ||
48 | restart binding | ||
49 | permit config | ||
50 | reject config | ||
51 | ipc config | ||
52 | } | ||