Arch Linux

Gghost

Member

From: Detroit

Registered: 2026-01-23

Posts: 8

Website

bootctl: Random seed file is world accessible

bootctl: Random seed file '/boot/loader/random-seed' is world accessible, which is a security hole!

is what I saw in my logs.

I was checking my logs to see why my laptop was freezing up. This is a new occurrence, starting today.
I found "bootctl: Random seed file '/boot/loader/random-seed' is world accessible, which is a security hole!"

I found that permissions can be set with fstab, but I have no idea what a 'random-seed' is.

Has anybody seen this before, or any idea if it's something I should be looking into?

dimich

Member

From: Kharkiv, Ukraine

Registered: 2009-11-03

Posts: 730

Re: bootctl: Random seed file is world accessible

Related: https://bbs.archlinux.org/viewtopic.php?id=314134

WorMzy

Administrator

From: Scotland

Registered: 2010-06-16

Posts: 13,606

Website

Re: bootctl: Random seed file is world accessible

Assuming the boot partition is vfat, add `umask=0077` to the mount options in fstab (or native systemd mount unit). Otherwise `chmod go-rwx /boot`.

https://man.archlinux.org/man/mount.8#M … ns_for_fat

---

Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD

Making lemonade from lemons since 2015.