diff options
Diffstat (limited to 'dot_config/systemd/user/snx-rs.service.d/10-chromium-saml.conf')
| -rw-r--r-- | dot_config/systemd/user/snx-rs.service.d/10-chromium-saml.conf | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/dot_config/systemd/user/snx-rs.service.d/10-chromium-saml.conf b/dot_config/systemd/user/snx-rs.service.d/10-chromium-saml.conf new file mode 100644 index 0000000..a5380e3 --- /dev/null +++ b/dot_config/systemd/user/snx-rs.service.d/10-chromium-saml.conf @@ -0,0 +1,10 @@ +[Service] +# Force snx-rs to use the flatpak ungoogled-chromium as its SAML browser. +# snx-rs calls `xdg-open <url>` via the `opener` crate. Prepending a private +# PATH dir that contains an `xdg-open` shim makes the daemon find our shim +# first, without affecting xdg-open for any other user process. +# +# Why not the system default browser? LibreWolf force-upgrades loopback to +# HTTPS and enables LNA blocking, both of which break snx-rs's plain-HTTP +# 127.0.0.1:7779 SAML callback. See firefox/user-overrides.js comments. +Environment=PATH=%h/.local/share/snx-rs/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin |