diff options
| author | adikro <adikro@disroot.org> | 2026-04-26 22:36:08 +0200 |
|---|---|---|
| committer | adikro <adikro@disroot.org> | 2026-04-26 22:36:08 +0200 |
| commit | 220b02da85f4350f59cfb6cd60198fc367dd3ed2 (patch) | |
| tree | a0c9801aa636784df62f9fc7c109a7dbd66fd3da /os | |
| parent | 251ea36117f63919dbb7b928e45740a71f90c7b4 (diff) | |
sync
Diffstat (limited to 'os')
| -rw-r--r-- | os/core/security.nix | 24 | ||||
| -rw-r--r-- | os/srv/gaming.nix | 2 | ||||
| -rw-r--r-- | os/wm/niri.nix | 2 |
3 files changed, 6 insertions, 22 deletions
diff --git a/os/core/security.nix b/os/core/security.nix index fd518c0..c401a14 100644 --- a/os/core/security.nix +++ b/os/core/security.nix @@ -48,29 +48,13 @@ in roddhjav-apparmor-rules ]; }; - programs.firejail.enable = true; - environment.etc = { - "firejail/games.profile".text = '' - include wine.profile - - # --- Security stuff --- - apparmor - nonewprivs - net none - noinput - nogroups - novideo - dbus-user none - dbus-system none + services.dbus.apparmor = "enabled"; + specialisation.no-apparmor.configuration.security.apparmor.enable = lib.mkForce false; - # --- Filesystem Isolation --- - whitelist ~/games/repacks/firejail - private-tmp - ''; - }; + programs.firejail.enable = true; environment.systemPackages = with pkgs; [ - landrun apparmor-utils + apparmor-parser apparmor-bin-utils ]; }) diff --git a/os/srv/gaming.nix b/os/srv/gaming.nix index ca59782..164670f 100644 --- a/os/srv/gaming.nix +++ b/os/srv/gaming.nix @@ -58,7 +58,7 @@ in (lib.mkIf cfg.launchers.enable { environment.systemPackages = with pkgs; [ heroic - (pkgs.bottles.override { removeWarningPopup = true; }) + # (pkgs.bottles.override { removeWarningPopup = true; }) (prismlauncher.override { additionalLibs = with pkgs; [ ocl-icd ]; jdks = with pkgs; [ javaPackages.compiler.temurin-bin.jdk-25 ]; diff --git a/os/wm/niri.nix b/os/wm/niri.nix index 587f543..58d27af 100644 --- a/os/wm/niri.nix +++ b/os/wm/niri.nix @@ -19,7 +19,7 @@ in programs.niri = { enable = true; - # package = pkgs.niri-unstable; + package = pkgs.niri-unstable; }; os.srv.compat.enable = true; |
