{"action":"created","issue":{"url":"https://api.github.com/repos/systemd/systemd/issues/2402","labels_url":"https://api.github.com/repos/systemd/systemd/issues/2402/labels{/name}","comments_url":"https://api.github.com/repos/systemd/systemd/issues/2402/comments","events_url":"https://api.github.com/repos/systemd/systemd/issues/2402/events","html_url":"https://github.com/systemd/systemd/issues/2402","id":127919957,"number":2402,"title":"Mount efivarfs read-only","user":{"login":"laloch","id":1336917,"avatar_url":"https://avatars.githubusercontent.com/u/1336917?v=3","gravatar_id":"","url":"https://api.github.com/users/laloch","html_url":"https://github.com/laloch","followers_url":"https://api.github.com/users/laloch/followers","following_url":"https://api.github.com/users/laloch/following{/other_user}","gists_url":"https://api.github.com/users/laloch/gists{/gist_id}","starred_url":"https://api.github.com/users/laloch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/laloch/subscriptions","organizations_url":"https://api.github.com/users/laloch/orgs","repos_url":"https://api.github.com/users/laloch/repos","events_url":"https://api.github.com/users/laloch/events{/privacy}","received_events_url":"https://api.github.com/users/laloch/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/systemd/systemd/labels/pid1","name":"pid1","color":"c7def8"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":54,"created_at":"2016-01-21T13:04:55Z","updated_at":"2016-01-30T03:39:16Z","closed_at":"2016-01-25T16:26:28Z","body":"Mounting efivarfs read/write by default can lead to accidental deletion of the EFI variables. It was already reported on Arch Linux forums, that running 'rm -rf' over a directory structure with mounted efivarfs did actually \"hard-brick\" some MSI notebook."},"comment":{"url":"https://api.github.com/repos/systemd/systemd/issues/comments/177058925","html_url":"https://github.com/systemd/systemd/issues/2402#issuecomment-177058925","issue_url":"https://api.github.com/repos/systemd/systemd/issues/2402","id":177058925,"user":{"login":"Baughn","id":45811,"avatar_url":"https://avatars.githubusercontent.com/u/45811?v=3","gravatar_id":"","url":"https://api.github.com/users/Baughn","html_url":"https://github.com/Baughn","followers_url":"https://api.github.com/users/Baughn/followers","following_url":"https://api.github.com/users/Baughn/following{/other_user}","gists_url":"https://api.github.com/users/Baughn/gists{/gist_id}","starred_url":"https://api.github.com/users/Baughn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Baughn/subscriptions","organizations_url":"https://api.github.com/users/Baughn/orgs","repos_url":"https://api.github.com/users/Baughn/repos","events_url":"https://api.github.com/users/Baughn/events{/privacy}","received_events_url":"https://api.github.com/users/Baughn/received_events","type":"User","site_admin":false},"created_at":"2016-01-30T03:39:15Z","updated_at":"2016-01-30T03:39:15Z","body":"@AbstractBeliefs: It's also a tempest in a teapot. How many different EFI implementations are actually known to brick themselves if you do this? And how likely is anyone to erase all the EFI vars by accident?\r\n\r\nI'm here mostly because it's yet more evidence to me that the UEFI spec is too complex, if people are failing to properly implement it to even the degree of bricking. As for embedded systems, yes, naturally those tend to lack the safeties that are supposed to be built into modern PCs; all this SMM code and failsafes don't come free."}}