From 3337df51509ec45cc09313256a03660449a0ad5f Mon Sep 17 00:00:00 2001
From: desolate <...>
Date: Mon, 1 Jun 2026 12:33:20 +0300
Subject: [PATCH] add apparmor parameters to grub

---
 dotfiles/grub/etc/default/grub | 21 +++++++++++++++++++++
 dotfiles/install-grub.sh       |  7 +++++++
 dotfiles/install.sh            |  1 +
 3 files changed, 29 insertions(+)
 create mode 100644 dotfiles/grub/etc/default/grub
 create mode 100755 dotfiles/install-grub.sh

diff --git a/dotfiles/grub/etc/default/grub b/dotfiles/grub/etc/default/grub
new file mode 100644
index 0000000..2f9b1d7
--- /dev/null
+++ b/dotfiles/grub/etc/default/grub
@@ -0,0 +1,21 @@
+#
+# Configuration file for GRUB.
+#
+GRUB_DEFAULT=0
+#GRUB_HIDDEN_TIMEOUT=0
+#GRUB_HIDDEN_TIMEOUT_QUIET=false
+GRUB_TIMEOUT=5
+GRUB_DISTRIBUTOR="Void"
+GRUB_CMDLINE_LINUX_DEFAULT="loglevel=2 apparmor=1 security=apparmor"
+# Uncomment to use basic console
+#GRUB_TERMINAL_INPUT="console"
+# Uncomment to disable graphical terminal
+#GRUB_TERMINAL_OUTPUT=console
+#GRUB_BACKGROUND=/usr/share/void-artwork/splash.png
+#GRUB_GFXMODE=1920x1080x32
+#GRUB_DISABLE_LINUX_UUID=true
+#GRUB_DISABLE_RECOVERY=true
+# Uncomment and set to the desired menu colors.  Used by normal and wallpaper
+# modes only.  Entries specified as foreground/background.
+#GRUB_COLOR_NORMAL="light-blue/black"
+#GRUB_COLOR_HIGHLIGHT="light-cyan/blue"
diff --git a/dotfiles/install-grub.sh b/dotfiles/install-grub.sh
new file mode 100755
index 0000000..90fe8ce
--- /dev/null
+++ b/dotfiles/install-grub.sh
@@ -0,0 +1,7 @@
+#!/bin/sh
+
+if [ -e /etc/default/grub ]; then
+  sudo rm /etc/default/grub
+fi
+
+install_dotfiles "/" "$DOTFILES_DIR" "grub"
diff --git a/dotfiles/install.sh b/dotfiles/install.sh
index a31d1e2..af9f945 100755
--- a/dotfiles/install.sh
+++ b/dotfiles/install.sh
@@ -6,6 +6,7 @@ INSTALLING DOTFILES:
 
 . "$DOTFILES_DIR/install-emptty.sh"
 . "$DOTFILES_DIR/install-fuzzel.sh"
+. "$DOTFILES_DIR/install-grub.sh"
 . "$DOTFILES_DIR/install-ghostty.sh"
 . "$DOTFILES_DIR/install-helix.sh"
 . "$DOTFILES_DIR/install-iwd.sh"