Enable Apparmor security in VMs

- Chromium-vm - Business-vm Signed-off-by: Ganga Ram <[email protected]>
tiiuae · Sep 26, 2024 · c458e46 · c458e46
1 parent d24b129
commit c458e46
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/modules/reference/appvms/business.nix b/modules/reference/appvms/business.nix
@@ -87,6 +87,8 @@ in
       };
 
       ghaf.reference.programs.chromium.enable = true;
+      ghaf.security.apparmor.enable = true;
+      ghaf.security.apparmor.apps.chromium.enable = true;
 
       # Set default PDF XDG handler
       xdg.mime.defaultApplications."application/pdf" = "ghaf-pdf.desktop";

diff --git a/modules/reference/appvms/chromium.nix b/modules/reference/appvms/chromium.nix
@@ -78,6 +78,8 @@ in
       };
 
       ghaf.reference.programs.chromium.enable = true;
+      ghaf.security.apparmor.enable = true;
+      ghaf.security.apparmor.apps.chromium.enable = true;
 
       # Set default PDF XDG handler
       xdg.mime.defaultApplications."application/pdf" = "ghaf-pdf.desktop";