summaryrefslogtreecommitdiffstats
path: root/modules/nixos/sils/apparmor.nix
diff options
context:
space:
mode:
authorSilas Schöffel <sils@sils.li>2024-06-07 16:57:13 +0200
committerSilas Schöffel <sils@sils.li>2024-06-07 17:49:11 +0200
commit1acb1455f0bbad09ac5abb87dcfde39cbaa5e575 (patch)
tree89eae231c1f3c52517d64d44b21ca50761e074cf /modules/nixos/sils/apparmor.nix
parentflake.lock: update (diff)
downloadnix-config-1acb1455f0bbad09ac5abb87dcfde39cbaa5e575.zip
firejail: wrap firefox with firejail
Diffstat (limited to 'modules/nixos/sils/apparmor.nix')
-rw-r--r--modules/nixos/sils/apparmor.nix14
1 files changed, 14 insertions, 0 deletions
diff --git a/modules/nixos/sils/apparmor.nix b/modules/nixos/sils/apparmor.nix
new file mode 100644
index 0000000..69cec21
--- /dev/null
+++ b/modules/nixos/sils/apparmor.nix
@@ -0,0 +1,14 @@
+{
+ config,
+ lib,
+ ...
+}: let
+ cfg = config.sils.apparmor;
+in {
+ options.sils.apparmor.enable = lib.mkEnableOption "apparmor";
+ config = lib.mkIf cfg.enable {
+ security.apparmor = {
+ enable = true;
+ };
+ };
+}