efivarfs: Add uid/gid mount options

Browse source

Allow UEFI variables to be modified by non-root processes in order to
run sandboxed code. This doesn't change the behavior of mounting
efivarfs unless uid/gid are specified; by default both are set to root.

Signed-off-by: Jiao Zhou <jiaozhou@google.com>
Acked-by: Matthew Garrett <mgarrett@aurora.tech>
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>

...

This commit is contained in:

Jiao Zhou 2023-10-20 00:46:39 +02:00 • committed by Ard Biesheuvel

parent 0bb80ecc33

commit 5329aa5101

3 changed files with 81 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

fs/efivarfs/inode.c

View file

9

fs/efivarfs/internal.h

View file

68

fs/efivarfs/super.c

View file