Stop boot partition being world readable (#128)

This commit is contained in:
Patrick Stevens
2025-10-19 23:32:37 +01:00
committed by GitHub
parent 7698d33f25
commit 2a986e89a8

View File

@@ -24,7 +24,7 @@
fileSystems."/boot" = { fileSystems."/boot" = {
device = "/dev/disk/by-uuid/5BCD-7078"; device = "/dev/disk/by-uuid/5BCD-7078";
fsType = "vfat"; fsType = "vfat";
options = ["fmask=0022" "dmask=0022"]; options = ["fmask=0077" "dmask=0077"];
}; };
swapDevices = []; swapDevices = [];