diff options
| author | Vaxry <vaxry@vaxry.net> | 2025-04-30 00:35:32 +0100 |
|---|---|---|
| committer | Vaxry <vaxry@vaxry.net> | 2025-04-30 00:35:32 +0100 |
| commit | 72cb5d24b6894334da021157c626556a8e99b6ff (patch) | |
| tree | f83bbd03ce2cba4a292901bfcdb8890fd588d869 /src | |
| parent | 9868b18378e99c8123a24fa4b152a58d5c0bfe67 (diff) | |
permissions: disable automatic reloading of permissions from cfg
security reasons, avoid reading them live. Ideally we'd lock them behind sudo, but we can't do that.
Diffstat (limited to 'src')
| -rw-r--r-- | src/config/ConfigManager.cpp | 5 | ||||
| -rw-r--r-- | src/config/defaultConfig.hpp | 2 |
2 files changed, 4 insertions, 3 deletions
diff --git a/src/config/ConfigManager.cpp b/src/config/ConfigManager.cpp index 0c45186e..3c0f2cf8 100644 --- a/src/config/ConfigManager.cpp +++ b/src/config/ConfigManager.cpp @@ -989,8 +989,6 @@ std::optional<std::string> CConfigManager::resetHLConfig() { m_failedPluginConfigValues.clear(); m_finalExecRequests.clear(); - g_pDynamicPermissionManager->clearConfigPermissions(); - // paths m_configPaths.clear(); std::string mainConfigPath = getMainConfigPath(); @@ -2911,7 +2909,8 @@ std::optional<std::string> CConfigManager::handlePermission(const std::string& c if (mode == PERMISSION_RULE_ALLOW_MODE_UNKNOWN) return "unknown permission allow mode"; - g_pDynamicPermissionManager->addConfigPermissionRule(data[0], type, mode); + if (m_isFirstLaunch) + g_pDynamicPermissionManager->addConfigPermissionRule(data[0], type, mode); return {}; } diff --git a/src/config/defaultConfig.hpp b/src/config/defaultConfig.hpp index 62611470..a9ea6694 100644 --- a/src/config/defaultConfig.hpp +++ b/src/config/defaultConfig.hpp @@ -70,6 +70,8 @@ env = HYPRCURSOR_SIZE,24 ################### # See https://wiki.hyprland.org/Configuring/Permissions/ +# Please note permission changes here require a Hyprland restart and are not applied on-the-fly +# for security reasons # ecosystem { # enforce_permissions = 1 |