From 220b02da85f4350f59cfb6cd60198fc367dd3ed2 Mon Sep 17 00:00:00 2001
From: adikro <adikro@disroot.org>
Date: Sun, 26 Apr 2026 22:36:08 +0200
Subject: sync

---
 os/core/security.nix | 24 ++++--------------------
 1 file changed, 4 insertions(+), 20 deletions(-)

(limited to 'os/core/security.nix')

diff --git a/os/core/security.nix b/os/core/security.nix
index fd518c0..c401a14 100644
--- a/os/core/security.nix
+++ b/os/core/security.nix
@@ -48,29 +48,13 @@ in
             roddhjav-apparmor-rules
           ];
         };
-        programs.firejail.enable = true;
-        environment.etc = {
-          "firejail/games.profile".text = ''
-            include wine.profile
-
-            # --- Security stuff ---
-            apparmor
-            nonewprivs
-            net none
-            noinput
-            nogroups
-            novideo
-            dbus-user none
-            dbus-system none
+        services.dbus.apparmor = "enabled";
+        specialisation.no-apparmor.configuration.security.apparmor.enable = lib.mkForce false;
 
-            # --- Filesystem Isolation ---
-            whitelist ~/games/repacks/firejail
-            private-tmp
-          '';
-        };
+        programs.firejail.enable = true;
         environment.systemPackages = with pkgs; [
-          landrun
           apparmor-utils
+          apparmor-parser
           apparmor-bin-utils
         ];
       })
-- 
cgit v1.3