1
Files
dotfiles/hosts/default/filesystem-hardening.nix
2024-12-07 17:33:23 +05:30

33 lines
425 B
Nix

{
fileSystems = {
"/root" = {
device = "/root";
options = [
"bind"
"nosuid"
"noexec"
"nodev"
];
};
"/var" = {
device = "/var";
options = [
"bind"
"nosuid"
"noexec"
"nodev"
];
};
"/etc" = {
device = "/etc";
options = [
"bind"
"nosuid"
"nodev"
];
};
};
}