From 1c7976f52a81ad8c7eb944c72d7dca6184bc24a2 Mon Sep 17 00:00:00 2001
From: Commenter <c@commenter.cc>
Date: Mon, 13 Apr 2026 00:05:16 -0500
Subject: [PATCH] Make PipeWire socket read-only

---
 io.github.kotatogram.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/io.github.kotatogram.yml b/io.github.kotatogram.yml
index a7cc7b0..8ccd27c 100644
--- a/io.github.kotatogram.yml
+++ b/io.github.kotatogram.yml
@@ -16,7 +16,7 @@ finish-args:
   - --talk-name=com.canonical.AppMenu.Registrar
   - --talk-name=com.canonical.indicator.application
   - --talk-name=org.ayatana.indicator.application
-  - --filesystem=xdg-run/pipewire-0
+  - --filesystem=xdg-run/pipewire-0:ro
   - --unset-env=QT_PLUGIN_PATH
 sdk-extensions:
   - org.freedesktop.Sdk.Extension.llvm16