You are not logged in.
Pages: 1
I wonder if is it possible to mount /sys/firmware/efi/efivars read-only. My great concern about these efivar is that it become very difficult to reset your machine in a pristine condition. Before that, if you have messed up your system, you could as a last resort reformat your hard disk and have a "new" installation again. If tools use efivar for their configuration, it became much more difficult. Resetting the efi variables does not appear to be easy. Maybe delete them all, but is that safe? I have a lot of variables that has been set by my Bios (including the secure boot key). I am not sure at all that I will not damage my system if I do this. In my case, the only solution I have found that seems to work is reflashing the bios.
This concern is not theoretical, gummiboot use efi variables to store how much time he must wait. But maybe, that was set by a previous owner of the computer or you have hit a keystroke years ago, removed gummiboot and completely forget what you have done. It is IMHO bad design. These tools don't really respect their documented default settings.
Offline
Just don't mount it - blacklist module "efivarfs"
My: [ GitHub | AUR Packages ]
Offline
Pages: 1