From: Jakub Czajka <jakub@ekhem.eu.org>
Date: Sun, 29 Jan 2023 14:17:36 +0000 (+0100)
Subject: [system] Lock the screen with `xsecurelock`.
X-Git-Url: https://git.ekhem.eu.org/?a=commitdiff_plain;h=c0cf83d115605b4e30b16f27d78ef1e43ec6463a;p=guix.git

[system] Lock the screen with `xsecurelock`.

`xsecurelock` must be added to `setuid-programs`. See documentation
for more information.
---

diff --git a/X11/.config/X11/xbindkeysrc b/X11/.config/X11/xbindkeysrc
index c2a885e..5f131d6 100644
--- a/X11/.config/X11/xbindkeysrc
+++ b/X11/.config/X11/xbindkeysrc
@@ -10,8 +10,8 @@
 "select_emoji"
   Mod4 + e
 
-"sleep 0.5; xtrlock"
+"sleep 0.5; xlock"
   Mod4 + l
 
-"sleep 0.5; xtrlock & sudo /bin/zzz"
+"sleep 0.5; xlock & sudo /bin/zzz"
   Mod4 + s
diff --git a/system.scm b/system.scm
index 62b3ecd..dde0205 100644
--- a/system.scm
+++ b/system.scm
@@ -13,10 +13,14 @@
 (use-package-modules base
 		     certs
 		     linux
-		     pulseaudio)
+		     pulseaudio
+		     xdisorg)
 
 (use-service-modules desktop)
 
+(use-system-modules nss
+		    setuid)
+
 (operating-system
  (kernel linux-libre)
  (keyboard-layout
@@ -72,6 +76,11 @@
  (timezone "Europe/Warsaw")
  (locale "en_US.UTF-8")
  (name-service-switch %mdns-host-lookup-nss)
+ (setuid-programs
+  (cons*
+   (setuid-program
+    (program (file-append xsecurelock "/libexec/xsecurelock/authproto_pam")))
+   %setuid-programs))
  (services
   (append
    (list bluez-service