security/fortify
2
1
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases 18 Wiki Activity

update README document

Browse Source 
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
This commit is contained in:
Ophestra 2024-09-09 05:14:14 +09:00
parent 0e5b85fd42
commit d813f8e44e
Signed by: cat
SSH Key Fingerprint: SHA256:gQ67O0enBZ7UdZypgtspB2FDM1g3GVw8nX0XSdcFw8Q
1 changed files with 23 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
README.md
View File

@ -76,15 +76,31 @@ This adds the `environment.fortify` option:
launchers = { launchers = {
weechat.method = "sudo"; weechat.method = "sudo";
claws-mail.capability.pulse = false; claws-mail.capability.pulse = false;
discord = { discord = {
command = "vesktop --ozone-platform-hint=wayland"; command = "vesktop --ozone-platform-hint=wayland";
share = pkgs.vesktop; share = pkgs.vesktop;
}; };
chromium.dbus.config = {
talk = [
"org.freedesktop.DBus"
"org.freedesktop.portal.*"
"org.freedesktop.FileManager1"
"org.freedesktop.Notifications"
"org.freedesktop.ScreenSaver"
];
own = [
"org.chromium.Chromium"
"org.mpris.MediaPlayer2.chromium.*"
];
};
}; };
packages = with pkgs; [ packages = with pkgs; [
weechat weechat
claws-mail claws-mail
vesktop vesktop
chromium
]; ];
persistence.directories = [ persistence.directories = [
".config/weechat" ".config/weechat"
@ -125,11 +141,17 @@ This adds the `environment.fortify` option:
* `command`, the command to run as the target user. Defaults to launcher name. * `command`, the command to run as the target user. Defaults to launcher name.
* `dbus.config`, D-Bus proxy custom configuration.
* `dbus.id`, D-Bus application id, has no effect if `dbus.config` is set.
* `dbus.mpris`, whether to enable MPRIS defaults, has no effect if `dbus.config` is set.
* `capability.wayland`, whether to share the Wayland socket. * `capability.wayland`, whether to share the Wayland socket.
* `capability.x11`, whether to share the X11 socket and allow connection. * `capability.x11`, whether to share the X11 socket and allow connection.
* `capability.dbus`, whether to proxy D-Bus. NOTE: this option is subject to change and should not be used * `capability.dbus`, whether to proxy D-Bus.
* `capability.pulse`, whether to share the PulseAudio socket and cookie. * `capability.pulse`, whether to share the PulseAudio socket and cookie.