diff --git a/src/main.rs b/src/main.rs
index c1b5ffc..b51cf5c 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -228,6 +228,17 @@ fn main() {
         .output()
         .expect("Failed to move nix files over");
 
+    // Fixes a security issue with boot
+    let _boot_fix = Command::new("sed")
+        .arg("-i")
+        .arg(r#"/fsType = "vfat"/ {
+            n
+            s/\(options = \[.*\)\]/\1"umask=0077 "]/ 
+        }"#)
+        .arg("/mnt/etc/nixos/hardware-configuration.nix")
+        .output()
+        .expect("Failed to apply boot fix");
+    
     // Host selection
     loop {
         println!("");