Fix security hole /boot and /boot/loader/random-seed

https://github.com/nix-community/disko/issues/527
2024-03-02 18:26:52 +01:00 · 2024-03-02 18:26:52 +01:00 · 03c92b4722
commit 03c92b4722
parent 126b71a6db
1 changed files with 1 additions and 0 deletions
--- a/hosts/franz/disko.nix
+++ b/hosts/franz/disko.nix
@ -19,6 +19,7 @@
              type = "filesystem";
              format = "vfat";
              mountpoint = "/boot";
+              mountOptions = ["umask=0077"];
            };
          };
          swap = {