From 8a260cf13bf9cdd0a7c623561bcbf0fa9abf849e Mon Sep 17 00:00:00 2001
From: niten <niten@fudo.org>
Date: Sat, 16 Oct 2021 18:08:51 -0700
Subject: [PATCH] state should be noexec

---
 config/hardware/socrates.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/hardware/socrates.nix b/config/hardware/socrates.nix
index 63a4f60..1542c73 100644
--- a/config/hardware/socrates.nix
+++ b/config/hardware/socrates.nix
@@ -76,7 +76,7 @@
       "/state" = {
         device = "/dev/disk/by-label/socrates-data";
         fsType = "btrfs";
-        options = [ "subvol=@state" "compress=zstd" "noatime" "nodiratime" ];
+        options = [ "subvol=@state" "compress=zstd" "noatime" "nodiratime" "noexec" ];
       };
 
       "/home" = {