aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFurkan Sahin <furkan-dev@proton.me>2017-07-11 10:19:28 -0400
committerFurkan Sahin <furkan-dev@proton.me>2017-07-11 10:19:28 -0400
commitf8f43b75aaa9b249b6d6aa2a08e2f46a36d8fd68 (patch)
treee3ba7424c31d9121d2f05c69d71e970b935e949a
parent423df15ac14b4d8272638931828276ae896f0829 (diff)
Merge pull request #1271 from johalun/master-securityconf-freebsd0.14-rc4
Add secucity config for FreeBSD.
-rw-r--r--security.d/10-freebsd.in12
-rw-r--r--sway/CMakeLists.txt4
2 files changed, 16 insertions, 0 deletions
diff --git a/security.d/10-freebsd.in b/security.d/10-freebsd.in
new file mode 100644
index 00000000..de405f70
--- /dev/null
+++ b/security.d/10-freebsd.in
@@ -0,0 +1,12 @@
+# sway security rules
+#
+# FreeBSD does not support getting client PID from server side
+# so we can not know the path to the client's binary.
+#
+# The solution for now is to be permissive and allow all
+# features by default for any client.
+
+# Configures enabled compositor features for specific programs
+permit * fullscreen keyboard mouse background screenshot panel lock
+
+
diff --git a/sway/CMakeLists.txt b/sway/CMakeLists.txt
index bf0b2e7f..61c22b84 100644
--- a/sway/CMakeLists.txt
+++ b/sway/CMakeLists.txt
@@ -93,6 +93,10 @@ endfunction()
add_config(config config sway)
add_config(00-defaults security.d/00-defaults sway/security.d)
+if (CMAKE_SYSTEM_NAME STREQUAL FreeBSD)
+ add_config(10-freebsd security.d/10-freebsd sway/security.d)
+endif (CMAKE_SYSTEM_NAME STREQUAL FreeBSD)
+
if (A2X_FOUND)
add_manpage(sway 1)
add_manpage(sway 5)