diff --git a/modules/system/os/security/module.nix b/modules/system/os/security/module.nix
index 46c037e..4ecdcf6 100644
--- a/modules/system/os/security/module.nix
+++ b/modules/system/os/security/module.nix
@@ -1,5 +1,18 @@
-_: {
+{pkgs, ...}: {
   imports = [
     ./sudo.nix
   ];
+
+  security = {
+    polkit = {
+      enable = true;
+      package = pkgs.polkit;
+    };
+
+    apparmor = {
+      enable = true;
+      killUnconfinedConfinables = true;
+      packages = [pkgs.apparmor-profiles];
+    };
+  };
 }