diff --git a/machines/loki/configuration.nix b/machines/loki/configuration.nix
index ed2ca9e..e349806 100644
--- a/machines/loki/configuration.nix
+++ b/machines/loki/configuration.nix
@@ -232,6 +232,9 @@
       enable = true;
     };
     sudo.enable = false;
+    apparmor = {
+      enable = true;
+    };
     pam.services.swaylock = {
       unixAuth = true;
       setLoginUid = true;