News for hackers. Stuff that matters.

A comment on Systemd mounted efivarfs read-write, allowing motherboard bricking via 'rm'. Parent comment

Re:Systemd mounted efivarfs read-write, allowing motherboard... by JoshTriplett on Saturday January 30, 2016 @03:30AM (#11001115)
> Despite the fact that they're primarily a systemd distro, Arch Linux strongly recommends that you mount efivarfs in ro mode and remount rw when doing kernel upgrades.

Why not leave it unmounted entirely, and only mount it when installing new boot entries?

[ Parent | on HN ]
Re:Systemd mounted efivarfs read-write, allowing motherboard... by simoncion on Saturday January 30, 2016 @04:10AM (#11001194)
> Why not leave it unmounted entirely, and only mount it when installing new boot entries?

Because there are -presumably- reasons to read EFI variables? If they're exposed through efivarsfs, then it's a convenient way to access them.

[ Parent | on HN ]