zathura: added stricter seccomp config

disabling sandbox, because we'll mostly use this for our own files
anyways

src/.config/fish/aliases.fish

@@ -1,5 +1,7 @@
 # zathura
-alias thur="zathura"
+function thur; zathura $argv; end
+# stricter sandbox zathura
+function zathsec; zathura -c ~/.config/zathura-sec $argv; end
 
 # Run mpv from clipboard
 function mpvy; mpv (xsel -b); end
@@ -8,7 +10,7 @@ function mpvy; mpv (xsel -b); end
 function gpgt; export GPG_TTY=(tty); end
 
 # Private neovim
-function nvimp; nvim -u NONE -c "setlocal history=0 nobackup nomodeline noshelltemp noswapfile noundofile nowritebackup secure viminfo=\"\""; end
+function nvimp; nvim -u NONE -c "setlocal history=0 nobackup nomodeline noshelltemp noswapfile noundofile nowritebackup secure viminfo=\"\"" $argv; end
 
 # Read pdf file as text
 function pdfr

src/.config/zathura-sec/zathurarc

@@ -0,0 +1,25 @@
+# zathura profile for opening foreign files
+
+set sandbox strict
+
+# make things fit better
+set scroll-page-aware true
+set adjust-open width
+
+set font "IBM Plex Sans 12"
+
+set recolor-darkcolor "#ffffff"
+set recolor-lightcolor rgba(0,0,0,0)
+set recolor false
+set recolor-keephue true
+set recolor-reverse-video true
+
+set default-bg "#000000ff"
+set index-bg "#000000"
+set index-active-bg "#111111"
+set index-active-fg "#FFFFFF"
+set inputbar-bg rgba(0,0,0,0.5)
+set inputbar-fg "#CCCCCC"
+set statusbar-bg rgba(0,0,0,0.5)
+
+set selection-clipboard clipboard

src/.config/zathura/zathurarc

@@ -1,6 +1,3 @@
-# might break things, but more secure
-set sandbox strict
-
 set statusbar-home-tilde true
 
 # make things fit better
@@ -27,3 +24,5 @@ set selection-clipboard clipboard
 
 map <C-l> exec copy_ref
 map <C-g> exec "copy_ref --section"
+
+map ,fr exec "open_typ.sh $FILE"

src/.local/bin/open_typ.sh

@@ -0,0 +1,4 @@
+#!/bin/sh
+# opens corresponding .typ to current .pdf
+
+st -e nvim $(printf "%s/%s.typ" $(dirname "$1") $(basename -s .pdf "$1"))

src/.local/bin/pyinstantref

@@ -1 +1 @@
-Subproject commit 31b4605b548e0e637b570f532be143b7eb91d553
+Subproject commit 0135f1eb4f7f0c2c200b76ea80e4ccf1c8169797