diff --git a/config/rootfiles/core/170/update.sh b/config/rootfiles/core/170/update.sh
index 8edb5ff2e..c9744f5f5 100644
--- a/config/rootfiles/core/170/update.sh
+++ b/config/rootfiles/core/170/update.sh
@@ -49,8 +49,11 @@ ldconfig
 
 # Start services
 
+# Harden mount options of /boot
+sed -e -i "s/[[:space:]]*\/boot[[:space:]]*auto[[:space:]]*defaults[[:space:]]*/ \/boot    auto defaults,nodev,noexec,nosuid   /g" /etc/fstab
+
 # This update needs a reboot...
-#touch /var/run/need_reboot
+touch /var/run/need_reboot
 
 # Finish
 /etc/init.d/fireinfo start