From aa48b926be21bfe9713a9caf36ce10b5345e50ab Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=89rico=20Rolim?= Date: Thu, 14 May 2020 02:28:22 -0300 Subject: [PATCH] security.d: remove directory Remove the entries from meson.build as well. --- meson.build | 16 ------------- security.d/00-defaults.in | 50 --------------------------------------- security.d/10-freebsd.in | 19 --------------- 3 files changed, 85 deletions(-) delete mode 100644 security.d/00-defaults.in delete mode 100644 security.d/10-freebsd.in diff --git a/meson.build b/meson.build index 75e06e3d1..54484cecf 100644 --- a/meson.build +++ b/meson.build @@ -209,22 +209,6 @@ configure_file( install_dir: join_paths(sysconfdir, 'sway') ) -if is_freebsd - configure_file( - configuration: config, - input: 'security.d/10-freebsd.in', - output: '@BASENAME@', - install_dir: join_paths(sysconfdir, 'sway', 'security.d') - ) -else - configure_file( - configuration: config, - input: 'security.d/00-defaults.in', - output: '@BASENAME@', - install_dir: join_paths(sysconfdir, 'sway', 'security.d') - ) -endif - install_data( 'sway.desktop', install_dir: join_paths(datadir, 'wayland-sessions') diff --git a/security.d/00-defaults.in b/security.d/00-defaults.in deleted file mode 100644 index be7b9d063..000000000 --- a/security.d/00-defaults.in +++ /dev/null @@ -1,50 +0,0 @@ -# sway security rules -# -# Read sway-security(7) for details on how to secure your sway install. -# -# You MUST read this man page if you intend to attempt to secure your sway -# installation. -# -# DO NOT CHANGE THIS FILE. Override these defaults by writing new files in -# @sysconfdir@/sway/security.d/* - -# Configures enabled compositor features for specific programs -permit * fullscreen keyboard mouse -permit @prefix@/bin/swaylock lock -permit @prefix@/bin/swaybg background -permit @prefix@/bin/swaybar panel - -# Configures enabled IPC features for specific programs -ipc @prefix@/bin/swaymsg { - * enabled - - events { - * disabled - } -} - -ipc @prefix@/bin/swaybar { - bar-config enabled - outputs enabled - workspaces enabled - command enabled - - events { - workspace enabled - mode enabled - } -} - -ipc @prefix@/bin/swaylock { - outputs enabled -} - -# Limits the contexts from which certain commands are permitted -commands { - * all - - fullscreen binding criteria - bindsym config - exit binding - kill binding -} diff --git a/security.d/10-freebsd.in b/security.d/10-freebsd.in deleted file mode 100644 index 533b526a4..000000000 --- a/security.d/10-freebsd.in +++ /dev/null @@ -1,19 +0,0 @@ -# sway security rules -# -# FreeBSD does not support getting client PID from server side -# so we can not know the path to the client's binary. -# -# The solution for now is to be permissive and allow all -# features by default for any client. - -# Configures enabled compositor features for specific programs -permit * fullscreen keyboard mouse background screenshot panel lock - -ipc * { - * enabled - events { - * enabled - } -} - -