Files
nix-config-ryan4yin/hardening/tests/policy/orca-slicer.nix
T

24 lines
561 B
Nix

{
load,
mkAppPolicy,
...
}:
let
app = load "orca-slicer";
in
mkAppPolicy "orca-slicer" {
network = "pasta";
media = false;
x11 = true;
notifications = true;
extraChecks = {
gdkX11 = app.bubblewrap.env.GDK_BACKEND == "x11";
webkitDmabuf = app.bubblewrap.env.WEBKIT_DISABLE_DMABUF_RENDERER == "1";
fileChooser = app.portalGroups.fileChooser;
openUri = app.portalGroups.openUri;
inputMethod = app.portalGroups.inputMethod;
webkit = app.portalGroups.webkit;
accessibility = app.desktopIntegration.accessibility;
};
}