Peter Jones ed8b0de5a3 efi: Make efivarfs entries immutable by default
"rm -rf" is bricking some peoples' laptops because of variables being
used to store non-reinitializable firmware driver data that's required
to POST the hardware.

These are 100% bugs, and they need to be fixed, but in the mean time it
shouldn't be easy to *accidentally* brick machines.

We have to have delete working, and picking which variables do and don't
work for deletion is quite intractable, so instead make everything
immutable by default (except for a whitelist), and make tools that
aren't quite so broad-spectrum unset the immutable flag.

Signed-off-by: Peter Jones <pjones@redhat.com>
Tested-by: Lee, Chun-Yi <jlee@suse.com>
Acked-by: Matthew Garrett <mjg59@coreos.com>
Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
2016-02-10 16:25:52 +00:00
..
2015-09-08 15:35:28 -07:00
2015-07-23 20:59:40 +02:00
2015-07-23 20:59:40 +02:00
2015-02-16 17:56:04 -08:00
2015-10-29 12:57:48 -05:00
2015-10-13 22:17:57 -07:00
2016-02-03 08:28:43 -08:00
2015-05-18 11:23:07 +02:00
2015-06-01 07:15:38 +10:00