- dev_host_access("/dev/dri", "/dev/snd"),
- ro_host_access("/tmp/.X11-unix/", os.environ["XAUTHORITY"]),
- ro_host_access(*globexpand(XDG_RUNTIME_DIR, ["wayland*", "pulse"])),
- # Access to some key global configuration
- ro_host_access(*globexpand(HOME, [".config/fontconfig", ".XCompose"])),
+ host_access({
+ "dev": {
+ ("dri", "snd"): Access.Device,
+ },
+ "/tmp/.X11-unix/": Access.Read,
+ os.environ["XAUTHORITY"]: Access.Read,
+ XDG_RUNTIME_DIR: {
+ ("wayland*", "pulse"): Access.Read,
+ },
+ }),
+ # Access to some key user configuration
+ home_access({
+ (".config/fontconfig", ".XCompose"): Access.Read,
+ }),