diff options
| author | adikro <adikro@disroot.org> | 2026-04-26 22:36:08 +0200 |
|---|---|---|
| committer | adikro <adikro@disroot.org> | 2026-04-26 22:36:08 +0200 |
| commit | 220b02da85f4350f59cfb6cd60198fc367dd3ed2 (patch) | |
| tree | a0c9801aa636784df62f9fc7c109a7dbd66fd3da /os/core/security.nix | |
| parent | 251ea36117f63919dbb7b928e45740a71f90c7b4 (diff) | |
sync
Diffstat (limited to 'os/core/security.nix')
| -rw-r--r-- | os/core/security.nix | 24 |
1 files changed, 4 insertions, 20 deletions
diff --git a/os/core/security.nix b/os/core/security.nix index fd518c0..c401a14 100644 --- a/os/core/security.nix +++ b/os/core/security.nix @@ -48,29 +48,13 @@ in roddhjav-apparmor-rules ]; }; - programs.firejail.enable = true; - environment.etc = { - "firejail/games.profile".text = '' - include wine.profile - - # --- Security stuff --- - apparmor - nonewprivs - net none - noinput - nogroups - novideo - dbus-user none - dbus-system none + services.dbus.apparmor = "enabled"; + specialisation.no-apparmor.configuration.security.apparmor.enable = lib.mkForce false; - # --- Filesystem Isolation --- - whitelist ~/games/repacks/firejail - private-tmp - ''; - }; + programs.firejail.enable = true; environment.systemPackages = with pkgs; [ - landrun apparmor-utils + apparmor-parser apparmor-bin-utils ]; }) |
