[system] Lock the screen with `xsecurelock`.

`xsecurelock` must be added to `setuid-programs`. See documentation
for more information.

diff --git a/X11/.config/X11/xbindkeysrc b/X11/.config/X11/xbindkeysrc
index c2a885ec9eda844743568c2e2c8c73c0518f3f60..5f131d6dc88750c56ebf49c891ead6f077d08f8a 100644 (file)
--- a/X11/.config/X11/xbindkeysrc
+++ b/X11/.config/X11/xbindkeysrc
@@ -10,8 +10,8 @@
 "select_emoji"
   Mod4 + e
 
-"sleep 0.5; xtrlock"
+"sleep 0.5; xlock"
   Mod4 + l
 
-"sleep 0.5; xtrlock & sudo /bin/zzz"
+"sleep 0.5; xlock & sudo /bin/zzz"
   Mod4 + s

diff --git a/system.scm b/system.scm
index 62b3ecda10bf8c2aef67979811a88c5345c5d575..dde02059b7b58ffe7f34fec77b8c5b1f76c06fa8 100644 (file)
--- a/system.scm
+++ b/system.scm
@@ -13,10 +13,14 @@
 (use-package-modules base
                     certs
                     linux
-                    pulseaudio)
+                    pulseaudio
+                    xdisorg)
 
 (use-service-modules desktop)
 
+(use-system-modules nss
+                   setuid)
+
 (operating-system
  (kernel linux-libre)
  (keyboard-layout
@@ -72,6 +76,11 @@
  (timezone "Europe/Warsaw")
  (locale "en_US.UTF-8")
  (name-service-switch %mdns-host-lookup-nss)
+ (setuid-programs
+  (cons*
+   (setuid-program
+    (program (file-append xsecurelock "/libexec/xsecurelock/authproto_pam")))
+   %setuid-programs))
  (services
   (append
    (list bluez-service