Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
Doc Block
Apr 15, 2003
Fun Shoe
doesn't systemd mount the EFI variables as read-write by default, so it's possible to literally brick your hardware by accidentally deleting the directory they're mounted under?

edit: apparently somebody already brought this up. "well, in this one case that doesn't happen very often, systemd will need to write to them so they're mounted read-write by default at all times for everybody. if this ruins your computer then you should buy another less lovely one anyway and git gud."

Doc Block fucked around with this message at 09:53 on Jun 2, 2017

Adbot
ADBOT LOVES YOU

Doc Block
Apr 15, 2003
Fun Shoe

Tankakern posted:

again, i think this is already fixed by making important efivarfs entries immutable. but i'm just a lowly whitenoise poster, no noone notices what i write anyway!

https://lwn.net/Articles/675073/

yeah, but the systemd dude just sticking his fingers in his ears saying "nah nah nah not my problem not listening nah nah nah" instead of just changing the default efivarfs mount to read-only (which it should be anyway IMHO) was pretty :rolleyes: and unhelpful.

Doc Block
Apr 15, 2003
Fun Shoe

Tankakern posted:

:wrong:

you need rw access for efibootmgr and stuff. the immutable setting was the right one, and lennart did the right thing.

it should be mounted read-only by default, then for the few times something needs to be changed it should be remounted as read-write, then remounted back to read-only when done.

that's in addition to having some EFI vars being made immutable by the kernel.

whole lotta autists ITT

Doc Block
Apr 15, 2003
Fun Shoe
"Hmm, yes, EFI vars should always be writeable because maybe systemd needs to change the boot volume every once in a blue moon."

edit: and yes, I know some are made immutable by the kernel, but even the EFI vars that won't brick the system if changed shouldn't be writeable without going through some hoops first to prevent accidents.

Doc Block fucked around with this message at 19:36 on Jun 3, 2017

Doc Block
Apr 15, 2003
Fun Shoe

Shinku ABOOKEN posted:

why is there an expectation that a system will still be bootable after rimming the whole disk???

the issue isn't that you could erase the disk, since you can always just reinstall the OS. the issue was that efivarfs maps EFI variables to the filesystem, and by deleting it you'd be deleting EFI system configuration data, and on systems with lovely UEFI implementations (LOL Samsung) you could make the computer itself unbootable (so that it wouldn't POST).

the kernel was fixed to disallow changing certain EFI data that could lead to the computer itself being rendered unbootable, but systemd still mounts efivarfs as read-write by default. while you can't brick the computer anymore, you can still mess with other EFI stuff by accident. all so that stuff like changing the boot volume can be done without having to remount efivarfs.

Doc Block
Apr 15, 2003
Fun Shoe

qhat posted:

Rofl. Someone calling someone a stupid oval office isn't a meltdown retard.

u mad bro?

gendered insult + disability insult, sounds like a meltdown to me

Doc Block fucked around with this message at 02:52 on Jun 4, 2017

Doc Block
Apr 15, 2003
Fun Shoe

Helianthus Annuus posted:

could have easily avoided the prob by saying "im a bsd admin :smugdog:" somewhere in this post

wait, are you telling me that freebieSD doesn't have systemd?

brb

Doc Block
Apr 15, 2003
Fun Shoe
and now for the lennart poettering post about how it's working as expected and is actually a fault in the [kernel|user|stars].

Doc Block
Apr 15, 2003
Fun Shoe

carry on then posted:

this is art lmao



that in poettering's mind having differing behaviors for "invalid username" and "valid, but nonexistant" is is just :monocle:, and that one of those behaviors should be "well gently caress it, just run as root" is just :monocle:

Doc Block
Apr 15, 2003
Fun Shoe
for a clown to use

Doc Block
Apr 15, 2003
Fun Shoe
genesis does what systemdon't

Doc Block
Apr 15, 2003
Fun Shoe
yeah, as in "you're a dope for using it."

Doc Block
Apr 15, 2003
Fun Shoe

lookit this fukken dope

Adbot
ADBOT LOVES YOU

Doc Block
Apr 15, 2003
Fun Shoe

Tankakern posted:

dont get why people continue slamming poettering for closing that """0day""" bug, the behaviour seems completely reasonable

"hey, this persion [accidentally | intentionally] put in an invalid username. should we not run that task and raise an error? nope, let's just run it as root!" isn't reasonable behavior.

  • Locked thread