security
/
fortify
2
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 14 Wiki Activity

update README document 

Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
This commit is contained in:
Ophestra Umiker 2024-09-09 23:22:07 +09:00
parent 52f986559c
commit 0ef321ad6f
Signed by: cat
SSH Key Fingerprint: SHA256:gQ67O0enBZ7UdZypgtspB2FDM1g3GVw8nX0XSdcFw8Q
1 changed files with 32 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
README.md
View File

@ -82,18 +82,36 @@ This adds the `environment.fortify` option:
share = pkgs.vesktop; share = pkgs.vesktop;
}; };
chromium.dbus.config = { chromium.dbus = {
talk = [ configSystem = {
"org.freedesktop.DBus" talk = [
"org.freedesktop.portal.*" "org.bluez"
"org.freedesktop.FileManager1" "org.freedesktop.Avahi"
"org.freedesktop.Notifications" "org.freedesktop.UPower"
"org.freedesktop.ScreenSaver" ];
]; };
own = [ config = {
"org.chromium.Chromium" talk = [
"org.mpris.MediaPlayer2.chromium.*" "org.freedesktop.DBus"
]; "org.freedesktop.FileManager1"
"org.freedesktop.Notifications"
"org.freedesktop.ScreenSaver"
"org.freedesktop.secrets"
"org.kde.kwalletd5"
"org.kde.kwalletd6"
];
own = [
"org.chromium.Chromium.*"
"org.mpris.MediaPlayer2.org.chromium.Chromium.*"
"org.mpris.MediaPlayer2.chromium.*"
];
call = {
"org.freedesktop.portal.*" = "*";
};
broadcast = {
"org.freedesktop.portal.*" = "@/org/freedesktop/portal/*";
};
};
}; };
}; };
packages = with pkgs; [ packages = with pkgs; [
@ -143,6 +161,8 @@ This adds the `environment.fortify` option:
* `dbus.config`, D-Bus proxy custom configuration. * `dbus.config`, D-Bus proxy custom configuration.
* `dbus.configSystem`, D-Bus system bus custom configuration, null to disable.
* `dbus.id`, D-Bus application id, has no effect if `dbus.config` is set. * `dbus.id`, D-Bus application id, has no effect if `dbus.config` is set.
* `dbus.mpris`, whether to enable MPRIS defaults, has no effect if `dbus.config` is set. * `dbus.mpris`, whether to enable MPRIS defaults, has no effect if `dbus.config` is set.