aboutsummaryrefslogtreecommitdiffstats
path: root/sway/sway-security.7.txt
diff options
context:
space:
mode:
authorLibravatar Drew DeVault <sir@cmpwn.com>2016-12-02 18:08:15 -0500
committerLibravatar Drew DeVault <sir@cmpwn.com>2016-12-02 18:09:19 -0500
commitd353da248b4653d7bc027ff0dceca946cdd0b22f (patch)
treeb76f5d9b8164a9eb102eee6b6cb13c5b9f6cbc75 /sway/sway-security.7.txt
parentEnforce IPC security policy (diff)
downloadsway-d353da248b4653d7bc027ff0dceca946cdd0b22f.tar.gz
sway-d353da248b4653d7bc027ff0dceca946cdd0b22f.tar.zst
sway-d353da248b4653d7bc027ff0dceca946cdd0b22f.zip
Add ipc connection feature policy controls
Diffstat (limited to 'sway/sway-security.7.txt')
-rw-r--r--sway/sway-security.7.txt9
1 files changed, 6 insertions, 3 deletions
diff --git a/sway/sway-security.7.txt b/sway/sway-security.7.txt
index a4122c5c..53c7b876 100644
--- a/sway/sway-security.7.txt
+++ b/sway/sway-security.7.txt
@@ -81,6 +81,9 @@ policies. These features are:
81 Permission to become fullscreen. Note that users can always make a window 81 Permission to become fullscreen. Note that users can always make a window
82 fullscreen themselves with the fullscreen command. 82 fullscreen themselves with the fullscreen command.
83 83
84**ipc**::
85 Permission to connect to sway's IPC socket.
86
84**keyboard**:: 87**keyboard**::
85 Permission to receive keyboard events (only while they are focused). 88 Permission to receive keyboard events (only while they are focused).
86 89
@@ -98,9 +101,9 @@ policies. These features are:
98**screenshot**:: 101**screenshot**::
99 Permission to take screenshots or record the screen. 102 Permission to take screenshots or record the screen.
100 103
101By default, all programs are granted **fullscreen**, **keyboard**, and **mouse** 104By default, all programs are granted **fullscreen**, **keyboard**, **mouse**, and
102permissions. You can use the following config commands to control a program's 105**ipc** permissions. You can use the following config commands to control a
103access: 106program's access:
104 107
105**permit** <executable> <features...>:: 108**permit** <executable> <features...>::
106 Permits <executable> to use <features> (each feature seperated by a space). 109 Permits <executable> to use <features> (each feature seperated by a space).