On Thu, Aug 24, 2023 at 12:51:07PM +0100, Jiao Zhou wrote: > We want to support fwupd for updating system firmware on Reven. Capsule updates > need to create UEFI variables. Our current approach to UEFI variables of > just allowing access to a static list of them at boot time won't work here. > > I think we could add mount options to efivarfs to set the uid/gid. We'd > then mount the file system with fwupd's uid/gid. This approach is used by a > number of other filesystems that don't have native support for ownership, > so I think it should be upstreamable. Makes sense. Acked-by: Matthew Garrett <mgarrett@xxxxxxxxxxx>
