starred/nix-config
1
0
Fork 0
mirror of https://github.com/ryan4yin/nix-config.git synced 2026-04-25 10:18:37 +02:00
Code Issues Packages Projects Releases 10 Wiki Activity

chore: nixpaks

Browse Source
This commit is contained in:
Ryan Yin
2025-11-01 16:34:00 +08:00
parent b034b383d7
commit 1436c6c069
1 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
hardening/nixpaks/modules/common.nix
View File

@@ -1,3 +1,4 @@
# https://github.com/mnixry/nixos-config/blob/74913c2b90d06e31170bbbaa0074f915721da224/desktop/packages/nixpaks-common.nix
{ {
lib, lib,
pkgs, pkgs,
@@ -12,15 +13,14 @@
inherit (config.flatpak) appId; inherit (config.flatpak) appId;
in in
{ {
# same usage as --see, --talk, --own
policies = { policies = {
"${appId}" = "own"; "${appId}" = "own";
"${appId}.*" = "own"; "${appId}.*" = "own";
"org.freedesktop.DBus" = "talk"; "org.freedesktop.DBus" = "talk";
"org.gtk.vfs.*" = "talk";
"org.gtk.vfs" = "talk";
"ca.desrt.dconf" = "talk"; "ca.desrt.dconf" = "talk";
"org.freedesktop.portal.*" = "talk"; "org.gtk.vfs" = "talk";
"org.a11y.Bus" = "talk"; "org.gtk.vfs.*" = "talk";
"org.freedesktop.appearance" = "talk"; "org.freedesktop.appearance" = "talk";
"org.freedesktop.appearance.*" = "talk"; "org.freedesktop.appearance.*" = "talk";
} }
@@ -49,6 +49,7 @@
"org.a11y.Bus" = "see"; "org.a11y.Bus" = "see";
# --- Portal Access --- # --- Portal Access ---
# "org.freedesktop.portal.*" = "talk";
"org.freedesktop.portal.Documents" = "talk"; "org.freedesktop.portal.Documents" = "talk";
"org.freedesktop.portal.FileTransfer" = "talk"; "org.freedesktop.portal.FileTransfer" = "talk";
"org.freedesktop.portal.FileTransfer.*" = "talk"; "org.freedesktop.portal.FileTransfer.*" = "talk";