filesystems: Fix /boot permissions

TLATER · Jan 28, 2024 · ef7a580 · ef7a580
1 parent 12858f4
commit ef7a580
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/nixos-config/default.nix b/nixos-config/default.nix
@@ -198,6 +198,8 @@
 
   security.sudo-rs.enable = true;
 
+  fileSystems."/boot".options = ["umask=0077"];
+
   fonts = {
     enableDefaultPackages = true;