From 422efcf258eb49ecd0d4de8e53adae656696ea56 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Mon, 8 Dec 2025 02:53:07 +0900 Subject: hst: check for insecure PulseAudio enablement This is currently still a noop, but required for #26. Signed-off-by: Ophestra --- options.nix | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) (limited to 'options.nix') diff --git a/options.nix b/options.nix index a1b76e06..effa6559 100644 --- a/options.nix +++ b/options.nix @@ -218,7 +218,7 @@ in type = nullOr bool; default = true; description = '' - Whether to share the Wayland socket. + Whether to share the Wayland server via security-context-v1. ''; }; @@ -238,11 +238,19 @@ in ''; }; + pipewire = mkOption { + type = nullOr bool; + default = true; + description = '' + Whether to share the PipeWire server via SecurityContext. + ''; + }; + pulse = mkOption { type = nullOr bool; default = true; description = '' - Whether to share the PulseAudio socket and cookie. + Whether to run the PulseAudio compatibility daemon. ''; }; }; -- cgit v1.3.1