permissions: disable automatic reloading of permissions from cfg
Some checks are pending
Build Hyprland / Build Hyprland (Arch) (push) Waiting to run
Build Hyprland / Build Hyprland with Meson (Arch) (push) Waiting to run
Build Hyprland / Build Hyprland without precompiled headers (Arch) (push) Waiting to run
Build Hyprland / Build Hyprland in pure Wayland (Arch) (push) Waiting to run
Build Hyprland / Code Style (Arch) (push) Waiting to run
Nix (CI) / build (push) Waiting to run
Nix (CI) / update-inputs (push) Waiting to run
Security Checks / Flawfinder Checks (push) Waiting to run

security reasons, avoid reading them live. Ideally we'd lock them behind sudo, but we can't do that.
This commit is contained in:
Vaxry 2025-04-30 00:35:32 +01:00
parent 9868b18378
commit 72cb5d24b6
No known key found for this signature in database
GPG key ID: 665806380871D640
3 changed files with 6 additions and 3 deletions

View file

@ -57,6 +57,8 @@ env = HYPRCURSOR_SIZE,24
###################
# See https://wiki.hyprland.org/Configuring/Permissions/
# Please note permission changes here require a Hyprland restart and are not applied on-the-fly
# for security reasons
# ecosystem {
# enforce_permissions = 1

View file

@ -989,8 +989,6 @@ std::optional<std::string> CConfigManager::resetHLConfig() {
m_failedPluginConfigValues.clear();
m_finalExecRequests.clear();
g_pDynamicPermissionManager->clearConfigPermissions();
// paths
m_configPaths.clear();
std::string mainConfigPath = getMainConfigPath();
@ -2911,7 +2909,8 @@ std::optional<std::string> CConfigManager::handlePermission(const std::string& c
if (mode == PERMISSION_RULE_ALLOW_MODE_UNKNOWN)
return "unknown permission allow mode";
g_pDynamicPermissionManager->addConfigPermissionRule(data[0], type, mode);
if (m_isFirstLaunch)
g_pDynamicPermissionManager->addConfigPermissionRule(data[0], type, mode);
return {};
}

View file

@ -70,6 +70,8 @@ env = HYPRCURSOR_SIZE,24
###################
# See https://wiki.hyprland.org/Configuring/Permissions/
# Please note permission changes here require a Hyprland restart and are not applied on-the-fly
# for security reasons
# ecosystem {
# enforce_permissions = 1