diff --git a/common/tooling/apparmor/default.nix b/common/tooling/apparmor/default.nix index 7150d75..9f2e665 100644 --- a/common/tooling/apparmor/default.nix +++ b/common/tooling/apparmor/default.nix @@ -18,9 +18,29 @@ in security.apparmor.enable = true; security.apparmor.includes = { - vesktop = ''include "${apparmor-d}/etc/apparmor.d/profiles-s-z/vesktop"''; + "local/vesktop" = '' +# @{lib}/libdl.so* mr, +# @{lib}/libglapi.so* mr, +# @{lib}/libc.so* mr, +# @{lib}/pluseaudio/** mr, + + @{bin}/electron rix, + /nix/store/*/libexec/electron/** rix, + + /nix/store/*/bin/** mr, + /nix/store/*/lib/** mr, + /nix/store/** r, + ''; }; - security.apparmor.policies = {}; + security.apparmor.policies = { + vesktop = { + enable = true; + enforce = true; + profile = '' + include "${apparmor-d}/etc/apparmor.d/profiles-s-z/vesktop" + ''; + }; + }; }; }