App armor has moved to a tristate check to enable

Signed-off-by: Brian McGillion <[email protected]>
tiiuae · Dec 31, 2024 · 1c3544f · 1c3544f
1 parent 97eec1d
commit 1c3544f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/common/security/apparmor/profiles/google-chrome.nix b/modules/common/security/apparmor/profiles/google-chrome.nix
@@ -9,7 +9,7 @@
 {
   ## Apparmor profile for Chromium
   config.security.apparmor.policies."bin.chrome" = lib.mkIf config.ghaf.security.apparmor.enable {
-    enforce = lib.mkForce true;
+    state = "enforce";
     profile = ''
       abi <abi/3.0>,
       include <tunables/global>