Hyprland 0.49 adds a built-in permission management system

General
1
1 Like
2

Still fairly limited but a definite step in the good direction

Permission list

screencopy:

  • Access to your screen without going through xdg-desktop-portal-hyprland. Examples include: grim, wl-screenrec, wf-recorder.
  • If denied, will render a black screen with a “permission denied” text.
  • Why deny? For apps / scripts that might maliciously try to capture your screen without your knowledge by using wayland protocols directly.

plugin:

  • Access to load a plugin. Can be either a regex for the app binary, or plugin path.
  • Do not allow hyprctl to load your plugins by default (attacker could issue hyprctl plugin load /tmp/my-malicious-plugin.so) - use either deny to disable or ask to be prompted.
1 Like