starred/nix-config
1
0
Fork 0
mirror of https://github.com/ryan4yin/nix-config.git synced 2026-04-29 04:07:02 +02:00
Code Issues Packages Projects Releases 10 Wiki Activity

feat(hardening/nixpaks): adjust app's direcotry permission

Browse Source
This commit is contained in:
Ryan Yin
2025-05-26 09:28:19 +08:00
parent e370856b94
commit f5f8b1ecc3
3 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
hardening/nixpaks/firefox.nix
View File

@@ -45,10 +45,11 @@ mkNixPak {
# NOTE: sloth.mkdir is used to create the directory if it does not exist! # NOTE: sloth.mkdir is used to create the directory if it does not exist!
(sloth.mkdir (sloth.concat' sloth.homeDir "/.mozilla")) (sloth.mkdir (sloth.concat' sloth.homeDir "/.mozilla"))
sloth.xdgDownloadDir
# ================ for externsions =============================== # ================ for externsions ===============================
# required by https://github.com/browserpass/browserpass-extension # required by https://github.com/browserpass/browserpass-extension
(sloth.concat' sloth.homeDir "/.local/share/password-store") # pass (sloth.concat' sloth.homeDir "/.local/share/password-store") # pass
sloth.xdgDownloadDir
sloth.xdgDocumentsDir
]; ];
bind.ro = [ bind.ro = [
# To actually make Firefox run # To actually make Firefox run

3
hardening/nixpaks/qq.nix
View File

@@ -41,7 +41,8 @@ mkNixPak {
# given the read write permission to the following directories. # given the read write permission to the following directories.
# NOTE: sloth.mkdir is used to create the directory if it does not exist! # NOTE: sloth.mkdir is used to create the directory if it does not exist!
(sloth.mkdir (sloth.concat [sloth.xdgConfigHome "/QQ"])) (sloth.mkdir (sloth.concat [sloth.xdgConfigHome "/QQ"]))
(sloth.mkdir (sloth.concat [sloth.xdgDownloadDir "/QQ"])) (sloth.mkdir (sloth.concat [sloth.xdgDocumentsDir "/QQ"]))
sloth.xdgDownloadDir
]; ];
sockets = { sockets = {
x11 = false; x11 = false;

2
hardening/nixpaks/wechat-uos.nix
View File

@@ -48,7 +48,7 @@ mkNixPak {
(sloth.mkdir (sloth.concat [sloth.homeDir "/.xwechat"])) (sloth.mkdir (sloth.concat [sloth.homeDir "/.xwechat"]))
(sloth.mkdir (sloth.concat [sloth.xdgDocumentsDir "/xwechat_files"])) (sloth.mkdir (sloth.concat [sloth.xdgDocumentsDir "/xwechat_files"]))
(sloth.mkdir (sloth.concat [sloth.xdgDocumentsDir "/WeChat_Data/"])) (sloth.mkdir (sloth.concat [sloth.xdgDocumentsDir "/WeChat_Data/"]))
(sloth.mkdir (sloth.concat [sloth.xdgDownloadDir "/WeChat"])) sloth.xdgDownloadDir
]; ];
sockets = { sockets = {
x11 = false; x11 = false;