57 lines
1.1 KiB
Plaintext
57 lines
1.1 KiB
Plaintext
# sway security rules
|
|
#
|
|
# Read sway-security(7) for details on how to secure your sway install.
|
|
#
|
|
# You MUST read this man page if you intend to attempt to secure your sway
|
|
# installation.
|
|
#
|
|
# DO NOT CHANGE THIS FILE. Override these defaults by writing new files in
|
|
# @sysconfdir@/sway/security.d/*
|
|
|
|
# Configures enabled compositor features for specific programs
|
|
permit * fullscreen keyboard mouse
|
|
permit @prefix@/bin/swaylock lock
|
|
permit @prefix@/bin/swaygrab screenshot
|
|
permit @sway_libexecdir@/swaybg background
|
|
permit @sway_libexecdir@/swaybar panel
|
|
|
|
# Configures enabled IPC features for specific programs
|
|
ipc @prefix@/bin/swaymsg {
|
|
* enabled
|
|
|
|
events {
|
|
* disabled
|
|
}
|
|
}
|
|
|
|
ipc @sway_libexecdir@/swaybar {
|
|
bar-config enabled
|
|
outputs enabled
|
|
workspaces enabled
|
|
command enabled
|
|
|
|
events {
|
|
workspace enabled
|
|
mode enabled
|
|
}
|
|
}
|
|
|
|
ipc @prefix@/bin/swaygrab {
|
|
outputs enabled
|
|
tree enabled
|
|
}
|
|
|
|
ipc @prefix@/bin/swaylock {
|
|
outputs enabled
|
|
}
|
|
|
|
# Limits the contexts from which certain commands are permitted
|
|
commands {
|
|
* all
|
|
|
|
fullscreen binding criteria
|
|
bindsym config
|
|
exit binding
|
|
kill binding
|
|
}
|