From e4ecfa03e17f9453d1803ef4be58c04f6176448f Mon Sep 17 00:00:00 2001 From: inference Date: Tue, 13 Feb 2024 02:51:45 +0000 Subject: [PATCH] Add `noexec` to "/boot/" Prevent execution on boot device since it holds no userspace executables. --- aa000-0/fstab | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/aa000-0/fstab b/aa000-0/fstab index 58076bc..b62dae2 100644 --- a/aa000-0/fstab +++ b/aa000-0/fstab @@ -1,6 +1,6 @@ # Inferencium - aa000-0 # Filesystem Table -# Version: 4.0.0-alpha.6 +# Version: 4.0.0-alpha.7 # Copyright 2023 Jake Winters # SPDX-License-Identifier: BSD-3-Clause @@ -13,7 +13,7 @@ # Local filesystems ## /boot/ -UUID=[REDACTED] /boot/ vfat noauto,noatime 1 2 +UUID=[REDACTED] /boot/ vfat noauto,noatime,noexec 1 2 ## swap /dev/mapper/swap none swap defaults 0 0 ## /