From 7277f2b8ef369c8381652b6209afaff458d6d04f Mon Sep 17 00:00:00 2001
From: isabel <isabel@isabelroses.com>
Date: Sat, 18 Apr 2026 00:51:00 +0100
Subject: [PATCH] nixos/security/apparmor: remove policies

uhrrr
---
 modules/nixos/security/apparmor.nix | 38 +----------------------------
 1 file changed, 1 insertion(+), 37 deletions(-)

diff --git a/modules/nixos/security/apparmor.nix b/modules/nixos/security/apparmor.nix
index 6628ae3b..cbee2964 100644
--- a/modules/nixos/security/apparmor.nix
+++ b/modules/nixos/security/apparmor.nix
@@ -1,12 +1,4 @@
-{
-  lib,
-  pkgs,
-  config,
-  ...
-}:
-let
-  inherit (lib) getExe;
-in
+{ pkgs, ... }:
 {
   services.dbus.apparmor = "disabled";
 
@@ -24,33 +16,5 @@ in
 
     # packages to be added to AppArmor’s include path
     packages = [ pkgs.apparmor-profiles ];
-
-    # apparmor policies
-    policies = {
-      "default_deny" = {
-        state = "disable";
-        profile = ''
-          profile default_deny /** { }
-        '';
-      };
-
-      "sudo" = {
-        state = "disable";
-        profile = ''
-          ${getExe pkgs.sudo} {
-            file /** rwlkUx,
-          }
-        '';
-      };
-
-      "nix" = {
-        state = "disable";
-        profile = ''
-          ${getExe config.nix.package} {
-            unconfined,
-          }
-        '';
-      };
-    };
   };
 }
-- 
2.51.2