niksos/hosts/common/core/fs-hardening.nix

_: {
    fileSystems."/boot".options = [ "nodev" "nosuid" "noexec" ];
}
add fs hardening thanks raf 2024-09-12 14:52:53 +02:00			`_: {`
or maybe not 2024-09-12 15:02:01 +02:00			`fileSystems."/boot".options = [ "nodev" "nosuid" "noexec" ];`
add fs hardening thanks raf 2024-09-12 14:52:53 +02:00			`}`