niksos/hosts/common/core/fs-hardening.nix

9 lines
170 B
Nix
Raw Normal View History

2024-09-12 14:52:53 +02:00
_: {
fileSystems = let
defaults = [ "nodev" "nosuid" "noexec" ];
in {
"/boot".options = defaults;
"/var/log".options = defaults;
};
}