make vesktop work

This commit is contained in:
Grimmauld 2024-10-12 21:01:10 +02:00
parent e072d9e4a5
commit d6e4ce8850
Signed by: Grimmauld
GPG key ID: C2946668769F91FB

View file

@ -18,9 +18,29 @@ in
security.apparmor.enable = true;
security.apparmor.includes = {
vesktop = ''include "${apparmor-d}/etc/apparmor.d/profiles-s-z/vesktop"'';
"local/vesktop" = ''
# @{lib}/libdl.so* mr,
# @{lib}/libglapi.so* mr,
# @{lib}/libc.so* mr,
# @{lib}/pluseaudio/** mr,
@{bin}/electron rix,
/nix/store/*/libexec/electron/** rix,
/nix/store/*/bin/** mr,
/nix/store/*/lib/** mr,
/nix/store/** r,
'';
};
security.apparmor.policies = {};
security.apparmor.policies = {
vesktop = {
enable = true;
enforce = true;
profile = ''
include "${apparmor-d}/etc/apparmor.d/profiles-s-z/vesktop"
'';
};
};
};
}