diff options
Diffstat (limited to 'security.in')
-rw-r--r-- | security.in | 46 |
1 files changed, 46 insertions, 0 deletions
diff --git a/security.in b/security.in new file mode 100644 index 00000000..16897ade --- /dev/null +++ b/security.in | |||
@@ -0,0 +1,46 @@ | |||
1 | # sway security rules | ||
2 | # | ||
3 | # Read sway-security(7) for details on how to secure your sway install. | ||
4 | # | ||
5 | # You MUST read this man page if you intend to attempt to secure your sway | ||
6 | # installation. | ||
7 | # | ||
8 | # This file should live at __SYSCONFDIR__/sway/security and will be | ||
9 | # automatically read by sway. | ||
10 | |||
11 | # Configures which programs are allowed to use which sway features | ||
12 | permit * fullscreen keyboard mouse ipc | ||
13 | permit __PREFIX__/bin/swaylock lock | ||
14 | permit __PREFIX__/bin/swaybar panel | ||
15 | permit __PREFIX__/bin/swaybg background | ||
16 | permit __PREFIX__/bin/swaygrab screenshot | ||
17 | |||
18 | # Configures which IPC features are enabled | ||
19 | ipc { | ||
20 | command enabled | ||
21 | outputs enabled | ||
22 | workspaces enabled | ||
23 | tree enabled | ||
24 | marks enabled | ||
25 | bar-config enabled | ||
26 | inputs enabled | ||
27 | |||
28 | events { | ||
29 | workspace enabled | ||
30 | output enabled | ||
31 | mode enabled | ||
32 | window enabled | ||
33 | input enabled | ||
34 | binding disabled | ||
35 | } | ||
36 | } | ||
37 | |||
38 | # Limits the contexts from which certain commands are permitted | ||
39 | commands { | ||
40 | * all | ||
41 | |||
42 | fullscreen binding criteria | ||
43 | bindsym config | ||
44 | exit binding | ||
45 | kill binding | ||
46 | } | ||