Why not just use the default, instead of separate partitions for everything? This is not a 30-year-old BSD.

For better control over permissions:

```

/ / ext4 defaults 1 1

/home /home ext4 defaults,nosuid,noexec,nodev 1 2

/tmp /tmp ext4 defaults,bind,nosuid,noexec,nodev 1 2

/var /var ext4 defaults,bind,nosuid 1 2

/boot /boot ext4 defaults,nosuid,noexec,nodev 1 2

```