Stop boot partition being world readable (#128)

This commit is contained in:
Patrick Stevens
2025-10-19 23:32:37 +01:00
committed by GitHub
parent 7698d33f25
commit 2a986e89a8

View File

@@ -24,7 +24,7 @@
fileSystems."/boot" = {
device = "/dev/disk/by-uuid/5BCD-7078";
fsType = "vfat";
options = ["fmask=0022" "dmask=0022"];
options = ["fmask=0077" "dmask=0077"];
};
swapDevices = [];