1 files changed, 8 insertions, 1 deletions
diff --git a/sys/boot/secure-boot.nix b/sys/boot/secure-boot.nix
index b13ab7c..150ff92 100644
--- a/sys/boot/secure-boot.nix
+++ b/sys/boot/secure-boot.nix
@@ -46,6 +46,13 @@ in {
       pkgs.sbctl
     ];
 
-    local.boot.impermanence.directories = [pkiBundle];
+    local.boot.impermanence.trust.directories = [
+      {
+        directory = pkiBundle;
+        user = "root";
+        group = "root";
+        mode = "u=rwx,g=,o=";
+      }
+    ];
   };
 }