disko: secure /boot

2023-10-18 17:42:59 +08:00 · 2023-10-18 17:42:59 +08:00 · 58e773ba33
commit 58e773ba33
parent d55cafd965
1 changed files with 1 additions and 1 deletions
--- a/flakes/nixos/disko.nix
+++ b/flakes/nixos/disko.nix
@ -19,7 +19,7 @@
                format = "vfat";
                mountpoint = "/boot";
                mountOptions = [
-                  "defaults"
+                  "defaults" "fmask=0077" "dmask=0077"
                ];
              };
            };