starred/nix-config
1
0
Fork 0
mirror of https://github.com/ryan4yin/nix-config.git synced 2026-07-15 09:02:40 +02:00
Code Issues Packages Projects Releases 10 Wiki Activity

feat: new host - idols-akane, hardens VFAT /boot mounts (#245)

Browse Source 
* feat: new host - idols-akane

* fix: missing efi files

* fix: efi partition - permission issue
This commit is contained in:
Ryan Yin
2026-03-07 23:54:13 +08:00
committed by GitHub
parent f9596089b3
commit 69f77fecca
10 changed files with 276 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/12kingdoms-shoukei/hardware-configuration.nix
+3 -2
View File
@@ -87,8 +87,9 @@ in
device = "/dev/disk/by-uuid/01CE-1DFD";
fsType = "vfat";
options = [
"fmask=0022"
"dmask=0022"
"fmask=0177" # File mask: 777-177=600 (Owner: rw-, Group/Others: ---)
"dmask=0077" # Directory mask: 777-077=700 (Owner: rwx, Group/Others: ---)
"noexec,nosuid,nodev" # Security: Block execution, ignore setuid, and disable device nodes
];
};