niksos/hosts/common/core/fs-hardening.nix
2024-09-12 15:02:01 +02:00

3 lines
72 B
Nix

_: {
fileSystems."/boot".options = [ "nodev" "nosuid" "noexec" ];
}