summaryrefslogtreecommitdiff
path: root/os/core
diff options
context:
space:
mode:
authoradikro <adikro@disroot.org>2026-04-26 22:36:08 +0200
committeradikro <adikro@disroot.org>2026-04-26 22:36:08 +0200
commit220b02da85f4350f59cfb6cd60198fc367dd3ed2 (patch)
treea0c9801aa636784df62f9fc7c109a7dbd66fd3da /os/core
parent251ea36117f63919dbb7b928e45740a71f90c7b4 (diff)
sync
Diffstat (limited to 'os/core')
-rw-r--r--os/core/security.nix24
1 files changed, 4 insertions, 20 deletions
diff --git a/os/core/security.nix b/os/core/security.nix
index fd518c0..c401a14 100644
--- a/os/core/security.nix
+++ b/os/core/security.nix
@@ -48,29 +48,13 @@ in
roddhjav-apparmor-rules
];
};
- programs.firejail.enable = true;
- environment.etc = {
- "firejail/games.profile".text = ''
- include wine.profile
-
- # --- Security stuff ---
- apparmor
- nonewprivs
- net none
- noinput
- nogroups
- novideo
- dbus-user none
- dbus-system none
+ services.dbus.apparmor = "enabled";
+ specialisation.no-apparmor.configuration.security.apparmor.enable = lib.mkForce false;
- # --- Filesystem Isolation ---
- whitelist ~/games/repacks/firejail
- private-tmp
- '';
- };
+ programs.firejail.enable = true;
environment.systemPackages = with pkgs; [
- landrun
apparmor-utils
+ apparmor-parser
apparmor-bin-utils
];
})