From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 9B901139694 for ; Thu, 13 Jul 2017 10:30:35 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 16FDC274166; Thu, 13 Jul 2017 10:30:25 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id B86FC21400C for ; Thu, 13 Jul 2017 10:30:24 +0000 (UTC) Received: from [10.100.0.22] (host-37-191-226-104.lynet.no [37.191.226.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: k_f) by smtp.gentoo.org (Postfix) with ESMTPSA id 789F83416E0 for ; Thu, 13 Jul 2017 10:30:23 +0000 (UTC) Subject: Re: [gentoo-dev] newsitem: openrc-0.28 mounts efivars read only To: gentoo-dev@lists.gentoo.org References: <20170712154236.GA10286@whubbs1.gaikai.biz> From: Kristian Fiskerstrand Message-ID: <23f293f8-1fe9-7fee-d300-51796537d6ee@gentoo.org> Date: Thu, 13 Jul 2017 12:30:12 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: <20170712154236.GA10286@whubbs1.gaikai.biz> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="9XKseUH76vxDU7FJvBhSbF9bI1HEjCoCC" X-Archives-Salt: e9ece337-68d3-4263-83c3-8d5433f9c0fc X-Archives-Hash: 240f18c7811df698c01d620474b9a1a0 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --9XKseUH76vxDU7FJvBhSbF9bI1HEjCoCC Content-Type: multipart/mixed; boundary="sDkA3fgd7Xwa5tIdBXkWvAUPEf7sMnjXU"; protected-headers="v1" From: Kristian Fiskerstrand Reply-To: k_f@gentoo.org To: gentoo-dev@lists.gentoo.org Message-ID: <23f293f8-1fe9-7fee-d300-51796537d6ee@gentoo.org> Subject: Re: [gentoo-dev] newsitem: openrc-0.28 mounts efivars read only References: <20170712154236.GA10286@whubbs1.gaikai.biz> In-Reply-To: <20170712154236.GA10286@whubbs1.gaikai.biz> --sDkA3fgd7Xwa5tIdBXkWvAUPEf7sMnjXU Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 07/12/2017 05:42 PM, William Hubbs wrote: > OpenRC 0.28 will mount efivars read only by default due to concerns > about users bricking systems by writing to this filesystem unexpectedly= =2E >=20 > Here is the newsitem covering this change. Although the changes seems sensible, I'm wondering if a news item is necessary for this case versus other documentation and script updates to reflect this change. For one thing it seems it will have minimal effect on a running system and not needing a migration path / configuration updates except in cases where bootloader installs are done; how intuitive is the feedback in this process when it is read-only? --=20 Kristian Fiskerstrand OpenPGP keyblock reachable at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3 --sDkA3fgd7Xwa5tIdBXkWvAUPEf7sMnjXU-- --9XKseUH76vxDU7FJvBhSbF9bI1HEjCoCC Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEtOrRIMf4mkrqRycHJQt6/tY3nYUFAllnS7UACgkQJQt6/tY3 nYVa9Qf+KiSXAfcfBC6wITfYWSlGhJBDYwr5R/0RQeuXxx4BViQLEIUNJXtz4PgU c3DybFEzTLpTWEXGqjVBO6xMtCyefyfN+YnmSWvTiA07JlHrTUO1OhZNYt13jZcM I/tluHmgH75nO3v/GEvyY+uKC2Ea6Ihq8Xk3l2oNnyyxWtVMoOFUEaK/o6TAgWh4 zQcPzl2oaPu0d0zBYq+WciY9jQpxMZtxUwC++/OsxqvVZrunJYfC6Ab7AdIgPQ98 9D0LbW/SA7nQ9djuZb5UaWNgmwPeXJqVZqLtlyjYG98NhxKvX8D2k0VuZpVYaIjl xYZ1LtuMAayjKY39Z/6zfLNnNsV7GA== =YH28 -----END PGP SIGNATURE----- --9XKseUH76vxDU7FJvBhSbF9bI1HEjCoCC--