andy/linux-nixos-hyprland-config-dotfiles
Template
1
0
Fork 0
mirror of https://github.com/XNM1/linux-nixos-hyprland-config-dotfiles.git synced 2025-09-15 09:45:58 +03:00
Code Activity

update(security): simplify security configuration and enhance apparmor

Browse Source 
- Remove SELinux-related configurations (kernel params, systemd
override, packages)
- Disable kernel modules locking
- Streamline LSM modules list
- Enhance AppArmor with kill unconfined option and PAM integration
- Add AppArmor support for various services (login, sshd, sudo, etc.)
- Enable D-Bus AppArmor integration
- Remove unused hyprlock PAM service
This commit is contained in:
xnm
2025-04-27 16:56:47 +03:00
parent 78d6258bfe
commit 83faa6a5e1
2 changed files with 18 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
nixos/security-services.nix
View File

@@ -18,13 +18,24 @@
};
security.apparmor = {
enable = true;
killUnconfinedConfinables = true;
packages = with pkgs; [
apparmor-utils
apparmor-profiles
];
};
security.pam.services = {
login.enableAppArmor = true;
sshd.enableAppArmor = true;
sudo.enableAppArmor = true;
su.enableAppArmor = true;
greetd.enableAppArmor = true;
u2f.enableAppArmor = true;
};
services.dbus.apparmor = "enabled";
services.fail2ban.enable = true;
security.pam.services.hyprlock = {};
# security.polkit.enable = true;
programs.browserpass.enable = true;
services.clamav = {