make vesktop work

common/tooling/apparmor/default.nix

@@ -18,9 +18,29 @@ in
     security.apparmor.enable = true;
 
     security.apparmor.includes = {
-      vesktop = ''include "${apparmor-d}/etc/apparmor.d/profiles-s-z/vesktop"'';
+      "local/vesktop" = ''
+#        @{lib}/libdl.so* mr,
+#        @{lib}/libglapi.so* mr,
+#        @{lib}/libc.so* mr,
+#        @{lib}/pluseaudio/** mr,
+
+        @{bin}/electron rix,
+        /nix/store/*/libexec/electron/** rix,
+
+        /nix/store/*/bin/** mr,
+        /nix/store/*/lib/** mr,
+        /nix/store/** r,
+      '';
     };
     
-    security.apparmor.policies = {};
+    security.apparmor.policies = {
+      vesktop = {
+        enable = true;
+        enforce = true;
+        profile = ''
+          include "${apparmor-d}/etc/apparmor.d/profiles-s-z/vesktop"
+        '';
+      };
+    };
   };
 }