From 28e8cdf197e28662d2933daa2a742cff91ed05af Mon Sep 17 00:00:00 2001
From: Alan Pearce
Date: Fri, 15 Sep 2017 14:00:45 +0200
Subject: systemd-boot: Don't allow modifying boot options

---
 modules/systemd-boot.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'modules')

diff --git a/modules/systemd-boot.nix b/modules/systemd-boot.nix
index 4f7ca361..80e79fdc 100644
--- a/modules/systemd-boot.nix
+++ b/modules/systemd-boot.nix
@@ -1,6 +1,9 @@
 { config, pkgs, ... }:
 
-{ boot.loader.systemd-boot.enable = true;
+{ boot.loader.systemd-boot = {
+    enable = true;
+    editor = false; # Don't allow modification
+  };
   boot.loader.efi.canTouchEfiVariables = true;
   boot.vesa = true;
   boot.earlyVconsoleSetup = true;
-- 
cgit 1.4.1