feature(boot): restrict access for /boot to root only

2026-10-03 10:55:13 +02:00
parent 4251ae2da5
commit 06f997c5ef
3 changed files with 47 additions and 29 deletions
@@ -40,8 +40,8 @@
    device = "/dev/disk/by-label/nixboot";
    fsType = "vfat";
    options = [
-      "fmask=0022"
-      "dmask=0022"
+      "fmask=0077"
+      "dmask=0077"
    ];
  };
  fileSystems."/home" = {