Fix security hole /boot and /boot/loader/random-seed
https://github.com/nix-community/disko/issues/527
This commit is contained in:
parent
126b71a6db
commit
03c92b4722
1 changed files with 1 additions and 0 deletions
|
@ -19,6 +19,7 @@
|
||||||
type = "filesystem";
|
type = "filesystem";
|
||||||
format = "vfat";
|
format = "vfat";
|
||||||
mountpoint = "/boot";
|
mountpoint = "/boot";
|
||||||
|
mountOptions = ["umask=0077"];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
swap = {
|
swap = {
|
||||||
|
|
Loading…
Reference in a new issue