Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

l browsers: use xjails

Browse Source
This commit is contained in:
lassulus 2018-03-28 21:13:57 +02:00
parent 92540f5cf1
commit 30068c17c9
1 changed files with 37 additions and 40 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

77
lass/2configs/browsers.nix
View File

@ -21,58 +21,55 @@ let
$BIN "$@"
'';
createChromiumUser = name: extraGroups: precedence:
let
bin = pkgs.writeScriptBin name ''
/var/run/wrappers/bin/sudo -u ${name} -i ${pkgs.chromium}/bin/chromium $@
'';
in {
users.extraUsers.${name} = {
inherit name;
inherit extraGroups;
home = "/home/${name}";
uid = genid name;
useDefaultShell = true;
createHome = true;
createChromiumUser = name: groups: precedence:
{
lass.xjail.${name} = {
user = name;
script = pkgs.writeDash name ''
${pkgs.chromium}/bin/chromium "$@"
'';
inherit groups;
};
environment.systemPackages = [ config.lass.xjail-bins.${name} ];
lass.browser.paths.${name} = {
path = bin;
path = config.lass.xjail-bins.${name};
inherit precedence;
};
security.sudo.extraConfig = ''
${mainUser.name} ALL=(${name}) NOPASSWD: ALL
'';
environment.systemPackages = [
bin
];
};
createFirefoxUser = name: extraGroups: precedence:
let
bin = pkgs.writeScriptBin name ''
/var/run/wrappers/bin/sudo -u ${name} -i ${pkgs.firefox-devedition-bin}/bin/firefox-devedition $@
'';
in {
users.extraUsers.${name} = {
inherit name;
inherit extraGroups;
home = "/home/${name}";
uid = genid name;
useDefaultShell = true;
createHome = true;
createFirefoxUser = name: groups: precedence:
{
lass.xjail.${name} = {
user = name;
script = pkgs.writeDash name ''
${pkgs.firefox-devedition-bin}/bin/firefox-devedition "$@"
'';
inherit groups;
};
environment.systemPackages = [ config.lass.xjail-bins.${name} ];
lass.browser.paths.${name} = {
path = bin;
path = config.lass.xjail-bins.${name};
inherit precedence;
};
security.sudo.extraConfig = ''
${mainUser.name} ALL=(${name}) NOPASSWD: ALL
'';
environment.systemPackages = [
bin
];
};
createQuteUser = name: groups: precedence:
{
lass.xjail.${name} = {
user = name;
script = pkgs.writeDash name ''
${pkgs.qutebrowser}/bin/qutebrowser "$@"
'';
inherit groups;
};
environment.systemPackages = [ config.lass.xjail-bins.${name} ];
lass.browser.paths.${name} = {
path = config.lass.xjail-bins.${name};
inherit precedence;
};
};
#TODO: abstract this
in {