From 5658bb7f8bf3522c501864ea73024f544b14de3a Mon Sep 17 00:00:00 2001
From: Fuwn <contact@fuwn.me>
Date: Sun, 22 Sep 2024 15:23:35 -0700
Subject: core: move kansai security to desktop

---
 modules/desktop/security/apparmor.nix | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 modules/desktop/security/apparmor.nix

(limited to 'modules/desktop/security/apparmor.nix')

diff --git a/modules/desktop/security/apparmor.nix b/modules/desktop/security/apparmor.nix
new file mode 100644
index 0000000..170838c
--- /dev/null
+++ b/modules/desktop/security/apparmor.nix
@@ -0,0 +1,22 @@
+{ pkgs, ... }:
+{
+  environment.systemPackages = with pkgs; [
+    apparmor-pam
+    apparmor-utils
+    apparmor-parser
+    apparmor-profiles
+    apparmor-bin-utils
+    apparmor-kernel-patches
+    libapparmor
+  ];
+
+  services.dbus.apparmor = "enabled";
+
+  security.apparmor = {
+    enable = true;
+    enableCache = true;
+    killUnconfinedConfinables = true;
+    packages = [ pkgs.apparmor-profiles ];
+    policies.dummy.profile = "/dummy { }";
+  };
+}
-- 
cgit v1.2.3