Add sway-security(7)

security.d/00-defaults.in

@@ -5,46 +5,12 @@
 # You MUST read this man page if you intend to attempt to secure your sway
 # installation.
 #
-# DO NOT CHANGE THIS FILE. Override these defaults by writing new files in
+# DO NOT CHANGE THIS FILE.
+#
+# Override these defaults by writing new files in
 # @sysconfdir@/sway/security.d/*
 
-# Configures enabled compositor features for specific programs
-permit * fullscreen keyboard mouse
-permit @prefix@/bin/swaylock lock
-permit @prefix@/bin/swaybg background
-permit @prefix@/bin/swaybar panel
-
-# Configures enabled IPC features for specific programs
-ipc @prefix@/bin/swaymsg {
-    * enabled
-
-    events {
-        * disabled
-    }
-}
-
-ipc @prefix@/bin/swaybar {
-    bar-config enabled
-    outputs enabled
-    workspaces enabled
-    command enabled
-
-    events {
-        workspace enabled
-        mode enabled
-    }
-}
-
-ipc @prefix@/bin/swaylock {
-    outputs enabled
-}
-
-# Limits the contexts from which certain commands are permitted
-commands {
-    * all
-
-    fullscreen binding criteria
-    bindsym config
-    exit binding
-    kill binding
-}
+permit * fullscreen
+permit @prefix@/bin/swaylock zwlr_layer_shell_v1 zwlr_input_inhibt_manager_v1
+permit @prefix@/bin/swaybg zwlr_layer_shell_v1
+permit @prefix@/bin/swaybar zwlr_layer_shell_v1