Enable Apparmor security in VMs

- Chromium-vm - Business-vm Signed-off-by: Ganga Ram <[email protected]>
tiiuae · Sep 30, 2024 · 4a0eb02 · 4a0eb02
1 parent fc423e7
commit 4a0eb02
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/modules/reference/appvms/business.nix b/modules/reference/appvms/business.nix
@@ -70,6 +70,8 @@ in
       };
 
       ghaf.reference.programs.chromium.enable = true;
+      ghaf.security.apparmor.enable = true;
+      ghaf.security.apparmor.apps.chromium.enable = true;
 
       # Set default PDF XDG handler
       xdg.mime.defaultApplications."application/pdf" = "ghaf-pdf.desktop";

diff --git a/modules/reference/appvms/chromium.nix b/modules/reference/appvms/chromium.nix
@@ -63,6 +63,8 @@ in
       };
 
       ghaf.reference.programs.chromium.enable = true;
+      ghaf.security.apparmor.enable = true;
+      ghaf.security.apparmor.apps.chromium.enable = true;
 
       # Set default PDF XDG handler
       xdg.mime.defaultApplications."application/pdf" = "ghaf-pdf.desktop";