summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDrew DeVault <sir@cmpwn.com>2017-07-11 10:19:28 -0400
committerDrew DeVault <ddevault@vistarmedia.com>2017-07-11 20:08:24 -0400
commitff1eccfabcec262981e0b9152f2a48665ab75d3e (patch)
treee3ba7424c31d9121d2f05c69d71e970b935e949a
parentcd3da457993015146a077b75e7d23ef94a91c256 (diff)
Merge pull request #1271 from johalun/master-securityconf-freebsd0.14-rc4
Add secucity config for FreeBSD.
-rw-r--r--security.d/10-freebsd.in12
-rw-r--r--sway/CMakeLists.txt4
2 files changed, 16 insertions, 0 deletions
diff --git a/security.d/10-freebsd.in b/security.d/10-freebsd.in
new file mode 100644
index 000000000..de405f709
--- /dev/null
+++ b/security.d/10-freebsd.in
@@ -0,0 +1,12 @@
+# sway security rules
+#
+# FreeBSD does not support getting client PID from server side
+# so we can not know the path to the client's binary.
+#
+# The solution for now is to be permissive and allow all
+# features by default for any client.
+
+# Configures enabled compositor features for specific programs
+permit * fullscreen keyboard mouse background screenshot panel lock
+
+
diff --git a/sway/CMakeLists.txt b/sway/CMakeLists.txt
index bf0b2e7fe..61c22b847 100644
--- a/sway/CMakeLists.txt
+++ b/sway/CMakeLists.txt
@@ -93,6 +93,10 @@ endfunction()
add_config(config config sway)
add_config(00-defaults security.d/00-defaults sway/security.d)
+if (CMAKE_SYSTEM_NAME STREQUAL FreeBSD)
+ add_config(10-freebsd security.d/10-freebsd sway/security.d)
+endif (CMAKE_SYSTEM_NAME STREQUAL FreeBSD)
+
if (A2X_FOUND)
add_manpage(sway 1)
add_manpage(sway 5)