nixbld: enable apparmor

This doesn't do much for now and apparmor support needs some work, but this enables the kernel boot options so we can fix apparmor later without having to reboot the server.
2019-09-16 09:32:58 +08:00 · 2019-09-16 09:32:58 +08:00 · bd9062421d
commit bd9062421d
parent cf6173a240
1 changed files with 2 additions and 0 deletions
--- a/nixbld-etc-nixos/configuration.nix
+++ b/nixbld-etc-nixos/configuration.nix
@ -23,6 +23,8 @@ in
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

+  security.apparmor.enable = true;
+
  networking = {
    hostName = "nixbld";
    firewall = {