Make /boot inacessible by default

2024-02-03 17:19:23 +01:00 · 2024-02-03 17:19:23 +01:00 · c19879ca69
parent 49ced5acf5
commit c19879ca69
1 changed files with 1 additions and 0 deletions
--- a/nixos/hosts/EDI/hardware-configuration.nix
+++ b/nixos/hosts/EDI/hardware-configuration.nix
@ -23,6 +23,7 @@
  fileSystems."/boot" =
    { device = "/dev/disk/by-uuid/01B2-909E";
      fsType = "vfat";
+      options = [ "fmask=0077" "dmask=0077" "defaults" ];
    };

  swapDevices =