diff options
| author | Ophestra Umiker <cat@ophivana.moe> | 2024-09-13 11:54:23 +0900 |
|---|---|---|
| committer | Ophestra Umiker <cat@ophivana.moe> | 2024-09-13 11:58:45 +0900 |
| commit | d49b97b1d4fcd07a21aa14bb1727d64dd0214b09 (patch) | |
| tree | a81ebaf4c03eb76c6959bfda3136da61e133161c | |
| parent | 40d0550ad3f450ce8bb597b851a2db9721b7d6f6 (diff) | |
nix: pass method string directly
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
| -rw-r--r-- | nixos.nix | 16 |
1 files changed, 8 insertions, 8 deletions
@@ -146,11 +146,12 @@ in method = mkOption { type = enum [ - "fortify" - "fortify-sudo" + "simple" "sudo" + "bubblewrap" + "systemd" ]; - default = "fortify"; + default = "systemd"; description = '' Launch method for the sandboxed program. ''; @@ -249,17 +250,16 @@ in + (if launcher.dbus.mpris then " -mpris" else "") + (if launcher.dbus.id != null then " -dbus-id ${launcher.dbus.id}" else "") + (if dbusConfig != null then " -dbus-config ${dbusConfig}" else "") - + (if dbusSystem != null then " -dbus-system ${dbusSystem}" else "") - + (if launcher.method == "fortify-sudo" then " -sudo" else ""); + + (if dbusSystem != null then " -dbus-system ${dbusSystem}" else ""); in pkgs.writeShellScriptBin name ( - if launcher.method == "sudo" then + if launcher.method == "simple" then '' exec sudo -u ${user} -i ${command} $@ '' else '' - exec fortify${capArgs} -u ${user} ${cfg.shell} -c "exec ${command} $@" + exec fortify${capArgs} -method ${launcher.method} -u ${user} ${cfg.shell} -c "exec ${command} $@" '' ) ) launchers; @@ -274,7 +274,7 @@ in link = source: "[ -d '${source}' ] && ln -sv '${source}' $out/share || true"; in shares - ++ optional (launcher.method == "fortify") ( + ++ optional (launcher.method != "simple" && (launcher.capability.wayland || launcher.capability.x11)) ( pkgs.runCommand "${name}-share" { } '' mkdir -p $out/share ${link "${pkg}/share/applications"} |
