Graham Christensen 4137ead7a1 Disable suid and atime on the /nix mount point on Darwin ...

The Determinate Nix Installer has set nosuid and noatime in https://github.com/DeterminateSystems/nix-installer/pull/1338, and figured this perf and security improvement is worthy of upstreaming.

The /nix volume shouldn't have setuid binaries anyway, and filesystems seem to generally be noatime on macOS.
Further, the garbage collector doesn't use atime.

2024-12-05 14:01:00 -05:00

32 KiB

Executable File

Raw Blame History

View Raw