diff options
Diffstat (limited to 'os/core')
| -rw-r--r-- | os/core/security.nix | 24 |
1 files changed, 4 insertions, 20 deletions
diff --git a/os/core/security.nix b/os/core/security.nix index fd518c0..c401a14 100644 --- a/os/core/security.nix +++ b/os/core/security.nix @@ -48,29 +48,13 @@ in roddhjav-apparmor-rules ]; }; - programs.firejail.enable = true; - environment.etc = { - "firejail/games.profile".text = '' - include wine.profile - - # --- Security stuff --- - apparmor - nonewprivs - net none - noinput - nogroups - novideo - dbus-user none - dbus-system none + services.dbus.apparmor = "enabled"; + specialisation.no-apparmor.configuration.security.apparmor.enable = lib.mkForce false; - # --- Filesystem Isolation --- - whitelist ~/games/repacks/firejail - private-tmp - ''; - }; + programs.firejail.enable = true; environment.systemPackages = with pkgs; [ - landrun apparmor-utils + apparmor-parser apparmor-bin-utils ]; }) |