diff options
Diffstat (limited to 'config.d/security.in')
-rw-r--r-- | config.d/security.in | 52 |
1 files changed, 52 insertions, 0 deletions
diff --git a/config.d/security.in b/config.d/security.in new file mode 100644 index 00000000..f59b2980 --- /dev/null +++ b/config.d/security.in | |||
@@ -0,0 +1,52 @@ | |||
1 | # sway security rules | ||
2 | # | ||
3 | # Read sway-security(7) for details on how to secure your sway install. | ||
4 | # | ||
5 | # You MUST read this man page if you intend to attempt to secure your sway | ||
6 | # installation. | ||
7 | |||
8 | # Configures which programs are allowed to use which sway features | ||
9 | permit __PREFIX__/swaylock lock | ||
10 | permit __PREFIX__/swaybar panel | ||
11 | permit __PREFIX__/swaybg background | ||
12 | permit __PREFIX__/swaygrab screenshot | ||
13 | |||
14 | permit * fullscreen keyboard mouse | ||
15 | |||
16 | # Configures which IPC features are enabled | ||
17 | ipc { | ||
18 | command enabled | ||
19 | outputs enabled | ||
20 | workspaces enabled | ||
21 | tree enabled | ||
22 | marks enabled | ||
23 | bar-config enabled | ||
24 | inputs enabled | ||
25 | |||
26 | events { | ||
27 | workspace enabled | ||
28 | output enabled | ||
29 | mode enabled | ||
30 | window enabled | ||
31 | bar-config enabled | ||
32 | binding enabled | ||
33 | modifier enabled | ||
34 | input enabled | ||
35 | } | ||
36 | } | ||
37 | |||
38 | # Limits the contexts from which certain commands are permitted | ||
39 | commands { | ||
40 | fullscreen binding criteria | ||
41 | bindsym config | ||
42 | exit binding | ||
43 | kill binding | ||
44 | |||
45 | # You should not change these unless you know what you're doing - it could | ||
46 | # cripple your security | ||
47 | reload binding | ||
48 | restart binding | ||
49 | permit config | ||
50 | reject config | ||
51 | ipc config | ||
52 | } | ||