Hacker News Reader

Comment by JulianMorrison | Hacker News Reader

Why not just turn off recognition of "rm" in the efivarfs? That is, the response to "unlink" of a file that represents a system abstraction of firmware should be something drastic only to the unlinker. SIGSEGV or something. "Go away, don't do that."

View on HN

That sounds like a sign that the filesystem may be the wrong abstraction for this.

Its far easier to just close the ticket and tell everyone to piss off.

Well there are use cases where you'd want to remove an EFI variable.

Then just require the efivars to have different semantics, just have a look like unbind works for drivers. If you really want to be super cautious, add a safeguard to enable this.

    echo 1       >/sys/...efi.../enable_remove
    echo varname >/sys/...efi.../remove_var

Reply on news.ycombinator.com