From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932296AbbCFIOw (ORCPT ); Fri, 6 Mar 2015 03:14:52 -0500 Received: from mail.skyhub.de ([78.46.96.112]:37057 "EHLO mail.skyhub.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932243AbbCFIOu (ORCPT ); Fri, 6 Mar 2015 03:14:50 -0500 Date: Fri, 6 Mar 2015 09:13:35 +0100 From: Borislav Petkov To: Andy Lutomirski Cc: Kweh Hock Leong , Matt Fleming , "Ong, Boon Leong" , "linux-efi@vger.kernel.org" , Greg Kroah-Hartman , Sam Protsenko , LKML , Ming Lei Subject: Re: Re: [PATCH v2 3/3] efi: Capsule update with user helper interface Message-ID: <20150306081334.GA3514@pd.tnic> References: <20150302122955.GB24476@codeblueprint.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.23 (2014-03-12) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Mar 05, 2015 at 03:08:42PM -0800, Andy Lutomirski wrote: > No. Only root should be able to load capsules, but even root may not > be able to write to /lib. So basically what we want to do is: # cat /any/path/to/efi/capsule/accessible/to/root/efi_capsule.img > /sys/firmware/efi/update Now it can't get any simpler than that and you get error codes too by failing the cat if the update fails. Mind you, I'm using '#' and not '$' as a shell prompt :-) -- Regards/Gruss, Boris. ECO tip #101: Trim your mails when you reply. --