Prevent non-root from creating new profiles

2024-06-23 20:26:40 -05:00
parent 5439286f0d
commit 8bd2e5942e
1 changed files with 1 additions and 0 deletions
--- a/harden.sh
+++ b/harden.sh
@@ -25,6 +25,7 @@ chown -R 0:0 system;
 chown -R 0:0 patches;
 chown 0:0 flake.lock;
 chown 0:0 flake.nix
+chown 0:0 profiles
 chown 0:0 profiles/*/configuration.nix;
 chown 0:0 harden.sh;
 chown 0:0 soften.sh;