Merge pull request #12185 from NixOS/mergify/bp/2.24-maintenance/pr-1…

…2016 Disable suid and atime on the /nix mount point on Darwin (backport #12016)
NixOS · Jan 10, 2025 · f2bb7e0 · f2bb7e0
2 parents 9a7196c + 56332fd
commit f2bb7e0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/scripts/create-darwin-volume.sh b/scripts/create-darwin-volume.sh
@@ -463,7 +463,7 @@ EOF
 
     EDITOR="$SCRATCH/ex_cleanroom_wrapper" _sudo "to add nix to fstab" "$@" <<EOF
 :a
-UUID=$uuid $escaped_mountpoint apfs rw,noauto,nobrowse,suid,owners
+UUID=$uuid $escaped_mountpoint apfs rw,noauto,nobrowse,nosuid,noatime,owners
 .
 :x
 EOF