Enable Apparmor security in VMs

- Chromium-vm - Business-vm Signed-off-by: Ganga Ram <[email protected]>
tiiuae · Oct 9, 2024 · d5cd139 · d5cd139
1 parent b8a0799
commit d5cd139
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/modules/reference/appvms/business.nix b/modules/reference/appvms/business.nix
@@ -113,6 +113,7 @@ in
             csdWrapper = "${pkgs.openconnect}/libexec/openconnect/hipreport.sh";
           };
         };
+        security.apparmor.enable = true;
       };
 
       # Set default PDF XDG handler

diff --git a/modules/reference/appvms/chromium.nix b/modules/reference/appvms/chromium.nix
@@ -69,6 +69,7 @@ in
       };
 
       ghaf.reference.programs.chromium.enable = true;
+      ghaf.security.apparmor.enable = true;
 
       # Set default PDF XDG handler
       xdg.mime.defaultApplications."application/pdf" = "ghaf-pdf.desktop";