From 2f55d36da93e280dab6748dc20dcaeb29062941c Mon Sep 17 00:00:00 2001 From: Tobias Powalowski Date: Wed, 18 Sep 2013 08:16:07 +0200 Subject: [PATCH] Keshav: Disable old efivars kernel module completely, even if it is found in the archboot initramfs image. --- usr/share/archboot/base/etc/modprobe.d/modprobe.conf | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/usr/share/archboot/base/etc/modprobe.d/modprobe.conf b/usr/share/archboot/base/etc/modprobe.d/modprobe.conf index 1e8154670..d23ecd441 100644 --- a/usr/share/archboot/base/etc/modprobe.d/modprobe.conf +++ b/usr/share/archboot/base/etc/modprobe.d/modprobe.conf @@ -4,7 +4,11 @@ blacklist floppy -blacklist efivars +## Completely disable old sysfs-efivars interface +install efivars /usr/bin/false + +## Blacklist useful but dangerous efi_pstore module blacklist efi_pstore +## Disable the efi_pstore functionality by default options efi_pstore pstore_disable=1