Hide permissions to Secureboot keys

2025-03-03 03:55:04 -05:00 · 2025-03-03 03:55:04 -05:00 · 7371d5da6a
commit 7371d5da6a
parent f428198857
1 changed files with 1 additions and 1 deletions
--- a/modules/system/devices/disks/impermanence/root/default.nix
+++ b/modules/system/devices/disks/impermanence/root/default.nix
@ -4,8 +4,8 @@
    hideMounts = true;
    directories = [
      "/etc/nixos"
-      "/etc/secureboot"
      "/var/lib/nixos"
+      { directory = "/etc/secureboot"; mode = "0700"; }
    ];
    files = [
      "/etc/machine-id"