#32698 – EFI boot partition is mounted and writable by all after installation from LiveCD

Bug 32698 - EFI boot partition is mounted and writable by all after installation from LiveCD

Summary: EFI boot partition is mounted and writable by all after installation from LiveCD

Status:	CLOSED FIXED

Alias:	None

Product:	Sisyphus
Classification:	Development
Component:	installer-feature-desktop-other-fs-stage2 (show other bugs)
Version:	unstable
Hardware:	all Linux

Importance:	P3 enhancement
Assignee:	Anton V. Boyarshinov
QA Contact:	qa-sisyphus

URL:
Keywords:

Depends on:
Blocks:

Reported:	2016-11-01 20:27 MSK by Ivan Zakharyaschev
Modified:	2016-12-05 21:01 MSK (History)
CC List:	2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description

Ivan Zakharyaschev 2016-11-01 20:27:12 MSK

Comment 1

Ivan Zakharyaschev 2016-11-01 20:28:50 MSK

EFI boot partition is mounted adn writable by all after installation from LiveCD:

[root@comp-core-i7-4790-227567 ~]# blkid
/dev/sda1: UUID="E510-876D" TYPE="vfat" PARTUUID="f0cc5d09-de65-aa43-9378-5f0b490f8d43"
/dev/sda2: PARTUUID="f5343cb8-e979-6346-9a7a-5fb9c1d59d9e"
/dev/sda3: UUID="760fe807-22ff-4b73-bb36-4b4c3185785c" TYPE="swap" PARTUUID="aac8f9e3-2e21-c24a-968d-52b4252f4ea0"
/dev/sda4: LABEL="alt8sys" UUID="bee0c9f5-22ef-4804-a6df-98b1be74742a" TYPE="ext4" PARTUUID="1cca868a-c3b4-f54b-b700-5cd1fa85e404"
/dev/sda5: LABEL="alt8home" UUID="f9cf9688-a56d-4063-9113-95d04f2ddca9" TYPE="ext4" PARTUUID="b8285f5f-d7ab-8946-b310-b10ebb35a7af"
/dev/sda6: LABEL="spt7sys" UUID="6917dc7d-cc69-44dd-96e1-22d3d09b1dac" TYPE="ext4" PARTUUID="3a45842c-ed06-e347-aa77-0028c0f7ed6e"
/dev/sda7: LABEL="spt7home" UUID="619e0b86-b451-4a40-8b8a-ba60d5d21b3b" TYPE="ext4" PARTUUID="0a7f3b11-9995-a445-ab43-30e062bb1c97"
/dev/sda8: LABEL="lx8boot" UUID="cd59c312-58a5-4887-982c-7cc11439de3e" TYPE="ext4" PARTUUID="04e0c537-d90c-7643-a93a-98249c5fbabf"
/dev/sda9: UUID="jmdSPj-Wmde-5cEa-y4Z7-HekH-XELs-Nu8IGk" TYPE="LVM2_member" PARTUUID="48be1cac-d024-e142-a202-8b742d0dab1e"
/dev/sda10: UUID="D1kn5A-Euv1-A8fD-ohzz-c7Ud-jG7P-uha2bi" TYPE="LVM2_member" PARTUUID="1a8af157-9c00-f24a-bc3d-7a202e973add"
/dev/sda11: UUID="NGq971-rlCq-INuV-4i9N-Ce8D-ltPi-nhxDIl" TYPE="LVM2_member" PARTUUID="9cdeb23c-9d7c-1e40-8c7a-04530a924731"
/dev/mapper/lx8-sys: LABEL="lx8sys" UUID="581ff2ec-69e8-4e34-9746-7204e5139d45" TYPE="ext4"
/dev/mapper/lx8-var: LABEL="lx8var" UUID="b36015c8-86eb-4982-b8e9-331ae9eaf39a" TYPE="ext4"
/dev/mapper/lx8-home: LABEL="lx8home" UUID="c4d75082-ef1e-4faa-a80a-6a9918b84604" TYPE="ext4"
[root@comp-core-i7-4790-227567 ~]# l /mnt/sda1
total 5
drwxr-xr-x 7 root root 4096 Nov  1 19:49 ../
drwxrwxrwx 3 root root  512 Jun 27 19:38 EFI/
drwxrwxrwx 3 root root  512 Jan  1  1970 ./
[root@comp-core-i7-4790-227567 ~]# l /mnt/sda1 -R
/mnt/sda1:
total 5
drwxr-xr-x 7 root root 4096 Nov  1 19:49 ../
drwxrwxrwx 3 root root  512 Jun 27 19:38 EFI/
drwxrwxrwx 3 root root  512 Jan  1  1970 ./

/mnt/sda1/EFI:
total 2
drwxrwxrwx 3 root root 512 Jun 27 19:38 ./
drwxrwxrwx 2 root root 512 Jun 27 19:38 altlinux/
drwxrwxrwx 3 root root 512 Jan  1  1970 ../

/mnt/sda1/EFI/altlinux:
total 1977
drwxrwxrwx 2 root root     512 Jun 27 19:38 ./
drwxrwxrwx 3 root root     512 Jun 27 19:38 ../
-rw-rw-rw- 1 root root     125 Jun 27 19:38 grub.cfg
-rw-rw-rw- 1 root root  649400 Dec 16  2015 grubx64.efi
-rw-rw-rw- 1 root root 1372392 Dec 17  2013 shim.efi
[root@comp-core-i7-4790-227567 ~]# l /mnt/
total 25
drwxr-xr-x 23 root root 4096 Nov  1 19:55 ../
drwxr-xr-x  7 root root 4096 Nov  1 19:49 ./
drwxr-xr-x 24 root root 4096 Nov  1 18:34 sda6/
drwxr-xr-x  4 root root 4096 Nov  1 17:27 sda5/
drwxr-xr-x 23 root root 4096 Oct  6 21:00 sda4/
drwxr-xr-x  4 root root 4096 Jun 30 14:25 sda7/
drwxrwxrwx  3 root root  512 Jan  1  1970 sda1/
[root@comp-core-i7-4790-227567 ~]#

Comment 2

Michael Shigorin 2016-12-05 21:00:46 MSK

installer-feature-desktop-other-fs is guilty.

Comment 3

Michael Shigorin 2016-12-05 21:01:18 MSK

* Mon Dec 05 2016 Michael Shigorin <mike@altlinux> 0.7.5-alt1
- exclude /boot/efi (closes: #32698)