Add nosuid to "/boot/"

Prevent setting setuid bit on files within the boot device since it
holds no userspace executables.
This commit is contained in:
inference 2024-02-13 02:53:22 +00:00
parent e4ecfa03e1
commit d47ee10a87
Signed by: inference
SSH Key Fingerprint: SHA256:FtEVfx1CmTKMy40VwZvF4k+3TC+QhCWy+EmPRg50Nnc

View File

@ -1,6 +1,6 @@
# Inferencium - aa000-0 # Inferencium - aa000-0
# Filesystem Table # Filesystem Table
# Version: 4.0.0-alpha.7 # Version: 4.0.0-alpha.8
# Copyright 2023 Jake Winters # Copyright 2023 Jake Winters
# SPDX-License-Identifier: BSD-3-Clause # SPDX-License-Identifier: BSD-3-Clause
@ -13,7 +13,7 @@
# Local filesystems # Local filesystems
## /boot/ ## /boot/
UUID=[REDACTED] /boot/ vfat noauto,noatime,noexec 1 2 UUID=[REDACTED] /boot/ vfat noauto,noatime,noexec,nosuid 1 2
## swap ## swap
/dev/mapper/swap none swap defaults 0 0 /dev/mapper/swap none swap defaults 0 0
## / ## /