On Thu, Feb 04, 2016 at 10:02:51PM +0000, Simon Hobson wrote: > Arnt Karlsen <[email protected]> wrote: > > > ..me, I do not see any point in keeping it mounted at all. > > Whenever such a need arises, it should be mounted read-only. > > If a need to write to /sys/firmware/efi/efivars should happen, > > the machine should first be taken off-line, backed-up etc out > > of production and into a maintenance mode, where mounting > > /sys/firmware/efi/efivars read-write, _may_ be warranted. > > > Yes, in an ideal world where everyone is a "full time admin". But in the real > world, more systems are used by "average users" who just expect "stuff to > work". So IMO, you either build stuff that works (or at least is up-front > about what's wrong), or you leave these people stuck with "stuff that's > broken" and regardless of how right you are, the pi**ed off user will be > moaning about how "rubbish and complicated this Linux is - best go back to > Windows". >
I don't get why any of those occasional "sysadmin-wannabe" users you have described above would ever need to mess around with their UEFI by hand. If you need to do that, you should first *know* what you are doing. My2Cents KatolaZ -- [ Enzo Nicosia aka KatolaZ --- GLUG Catania -- Freaknet Medialab ] [ me [at] katolaz.homeunix.net -- http://katolaz.homeunix.net -- ] [ GNU/Linux User:#325780/ICQ UIN: #258332181/GPG key ID 0B5F062F ] [ Fingerprint: 8E59 D6AA 445E FDB4 A153 3D5A 5F20 B3AE 0B5F 062F ] _______________________________________________ Dng mailing list [email protected] https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
