Merge pull request NixOS#12016 from grahamc/patch-2

Mic92 · web-flow · commit ab5a9cf2db31 · 2024-12-06T01:37:39.000+01:00
Disable suid and atime on the /nix mount point on Darwin
diff --git a/scripts/create-darwin-volume.sh b/scripts/create-darwin-volume.sh
@@ -463,7 +463,7 @@ EOF
 
     EDITOR="$SCRATCH/ex_cleanroom_wrapper" _sudo "to add nix to fstab" "$@" <<EOF
 :a
-UUID=$uuid $escaped_mountpoint apfs rw,noauto,nobrowse,suid,owners
+UUID=$uuid $escaped_mountpoint apfs rw,noauto,nobrowse,nosuid,noatime,owners
 .
 :x
 EOF

Original file line number	Diff line number	Diff line change
`@@ -463,7 +463,7 @@ EOF`
`463`	`463`
`464`	`464`	`EDITOR="$SCRATCH/ex_cleanroom_wrapper" _sudo "to add nix to fstab" "$@" <<EOF`
`465`	`465`	`:a`
`466`		`-UUID=$uuid $escaped_mountpoint apfs rw,noauto,nobrowse,suid,owners`
	`466`	`+UUID=$uuid $escaped_mountpoint apfs rw,noauto,nobrowse,nosuid,noatime,owners`
`467`	`467`	`.`
`468`	`468`	`:x`
`469`	`469`	`EOF`