hyprwm/Hyprland
1
0
Fork 0
mirror of https://github.com/hyprwm/Hyprland.git synced 2025-05-13 07:10:35 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

permissions: disable automatic reloading of permissions from cfg
Some checks are pending
Build Hyprland / Build Hyprland (Arch) (push) Waiting to run
Details
Build Hyprland / Build Hyprland with Meson (Arch) (push) Waiting to run
Details
Build Hyprland / Build Hyprland without precompiled headers (Arch) (push) Waiting to run
Details
Build Hyprland / Build Hyprland in pure Wayland (Arch) (push) Waiting to run
Details
Build Hyprland / Code Style (Arch) (push) Waiting to run
Details
Nix (CI) / build (push) Waiting to run
Details
Nix (CI) / update-inputs (push) Waiting to run
Details
Security Checks / Flawfinder Checks (push) Waiting to run
Details

Browse source 
security reasons, avoid reading them live. Ideally we'd lock them behind sudo, but we can't do that.
This commit is contained in:
Vaxry 2025-04-30 00:35:32 +01:00
parent 9868b18378
commit 72cb5d24b6
No known key found for this signature in database
GPG key ID: 665806380871D640
3 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
example/hyprland.conf
View file

@ -57,6 +57,8 @@ env = HYPRCURSOR_SIZE,24
################### ###################
# See https://wiki.hyprland.org/Configuring/Permissions/ # See https://wiki.hyprland.org/Configuring/Permissions/
# Please note permission changes here require a Hyprland restart and are not applied on-the-fly
# for security reasons
# ecosystem { # ecosystem {
# enforce_permissions = 1 # enforce_permissions = 1

3
src/config/ConfigManager.cpp
View file

@ -989,8 +989,6 @@ std::optional<std::string> CConfigManager::resetHLConfig() {
m_failedPluginConfigValues.clear(); m_failedPluginConfigValues.clear();
m_finalExecRequests.clear(); m_finalExecRequests.clear();
g_pDynamicPermissionManager->clearConfigPermissions();
// paths // paths
m_configPaths.clear(); m_configPaths.clear();
std::string mainConfigPath = getMainConfigPath(); std::string mainConfigPath = getMainConfigPath();
@ -2911,6 +2909,7 @@ std::optional<std::string> CConfigManager::handlePermission(const std::string& c
if (mode == PERMISSION_RULE_ALLOW_MODE_UNKNOWN) if (mode == PERMISSION_RULE_ALLOW_MODE_UNKNOWN)
return "unknown permission allow mode"; return "unknown permission allow mode";
if (m_isFirstLaunch)
g_pDynamicPermissionManager->addConfigPermissionRule(data[0], type, mode); g_pDynamicPermissionManager->addConfigPermissionRule(data[0], type, mode);
return {}; return {};

2
src/config/defaultConfig.hpp
View file

@ -70,6 +70,8 @@ env = HYPRCURSOR_SIZE,24
################### ###################
# See https://wiki.hyprland.org/Configuring/Permissions/ # See https://wiki.hyprland.org/Configuring/Permissions/
# Please note permission changes here require a Hyprland restart and are not applied on-the-fly
# for security reasons
# ecosystem { # ecosystem {
# enforce_permissions = 1 # enforce_permissions = 1