mirror of
https://github.com/swaywm/sway.git
synced 2025-11-03 09:01:43 -05:00
50 lines
1.1 KiB
Text
50 lines
1.1 KiB
Text
# sway security rules
|
|
#
|
|
# Read sway-security(7) for details on how to secure your sway install.
|
|
#
|
|
# You MUST read this man page if you intend to attempt to secure your sway
|
|
# installation.
|
|
|
|
# Configures which programs are allowed to use which sway features
|
|
permit * fullscreen keyboard mouse ipc
|
|
permit __PREFIX__/bin/swaylock lock
|
|
permit __PREFIX__/bin/swaybar panel
|
|
permit __PREFIX__/bin/swaybg background
|
|
permit __PREFIX__/bin/swaygrab screenshot
|
|
|
|
# Configures which IPC features are enabled
|
|
ipc {
|
|
command enabled
|
|
outputs enabled
|
|
workspaces enabled
|
|
tree enabled
|
|
marks enabled
|
|
bar-config enabled
|
|
inputs enabled
|
|
|
|
events {
|
|
workspace enabled
|
|
output enabled
|
|
mode enabled
|
|
window enabled
|
|
input enabled
|
|
binding disabled
|
|
}
|
|
}
|
|
|
|
# Limits the contexts from which certain commands are permitted
|
|
commands {
|
|
* all
|
|
|
|
fullscreen binding criteria
|
|
bindsym config
|
|
exit binding
|
|
kill binding
|
|
|
|
# You should not change these unless you know what you're doing - it could
|
|
# cripple your security
|
|
reload binding
|
|
permit config
|
|
reject config
|
|
ipc config
|
|
}
|