timka123
36af1e9e83
A hosts file cannot express a wildcard, so '*.youtube.com' was only ever the
base domain plus the guessed labels. The patterns the server now hands over
as unexpandable are answered by a stub on 127.0.0.1, and the helper owns one
systemd-resolved drop-in that points just those zones at it:
* the stub is listening before the drop-in is written, and the drop-in is
removed before the stub stops, so a zone's queries never land on a dead
port;
* stub and route live as long as the app, not the interval: between
intervals they forward everything, instead of restarting resolved (and
dropping its cache) on every pomodoro;
* a crashed run leaves a world-readable drop-in the next start adopts, and
the stub comes back before anything else;
* masks with nothing routable after their last '*' ('*gram*') are reported
as unenforceable, not silently dropped.
The Blocker page now reports what is really in place — the hosts region, the
routed zones, and the masks this machine cannot do — rather than the whole
expansion. 39 desktop tests, including the ordering invariants.
32 lines
1.6 KiB
XML
32 lines
1.6 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE policyconfig PUBLIC
|
|
"-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
|
|
"http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
|
|
<!--
|
|
Lets a logged-in user run Kadence's helper through pkexec.
|
|
|
|
The default is `auth_admin_keep`: you authenticate once and the grant is kept
|
|
for the rest of the session, so a day of pomodoros is one password prompt, not
|
|
twenty. install.sh can optionally drop in a rule that skips the prompt
|
|
entirely for one user.
|
|
-->
|
|
<policyconfig>
|
|
<vendor>Kadence</vendor>
|
|
<vendor_url>https://github.com/</vendor_url>
|
|
|
|
<action id="org.kadence.helper.manage-hosts">
|
|
<description>Manage the Kadence website block list and its DNS routing</description>
|
|
<description xml:lang="ru">Управление списком заблокированных сайтов Kadence и их DNS-маршрутизацией</description>
|
|
<message>Authentication is required to change which websites are blocked.</message>
|
|
<message xml:lang="ru">Для изменения списка заблокированных сайтов требуется аутентификация.</message>
|
|
<icon_name>kadence</icon_name>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>auth_admin</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
<annotate key="org.freedesktop.policykit.exec.path">/usr/local/bin/kadence-helper</annotate>
|
|
<annotate key="org.freedesktop.policykit.exec.allow_gui">true</annotate>
|
|
</action>
|
|
</policyconfig>
|