From 7371d5da6a5a8aafc3010ea95fa4c1bb8ddbe410 Mon Sep 17 00:00:00 2001
From: Jimbo <jimbo@nixfox.ca>
Date: Mon, 3 Mar 2025 03:55:04 -0500
Subject: [PATCH] Hide permissions to Secureboot keys

---
 modules/system/devices/disks/impermanence/root/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/system/devices/disks/impermanence/root/default.nix b/modules/system/devices/disks/impermanence/root/default.nix
index e611e07..9786f24 100644
--- a/modules/system/devices/disks/impermanence/root/default.nix
+++ b/modules/system/devices/disks/impermanence/root/default.nix
@@ -4,8 +4,8 @@
     hideMounts = true;
     directories = [
       "/etc/nixos"
-      "/etc/secureboot"
       "/var/lib/nixos"
+      { directory = "/etc/secureboot"; mode = "0700"; }
     ];
     files = [
       "/etc/machine-id"