Posted on Feb 5, 2016
Running "rm -rf /" Is Now Bricking UEFI Based Linux Systems
574
8
13
1
1
0
Posted 9 y ago
Responses: 3
I guess I can see how this might be a little fun but I've always just used the disk utility built in to every OS installation process to format my disks when installing/reinstalling. Interesting that UEFI is mounted read/write. Was going to say it should be mounted read only but according to the article that causes problems too. Hopefully they'll come up with a solution to this but it will most likely require both firmware and OS updates. Having UEFI mounted rw creates a serious security problem. Imagine malicious code that infects UEFI and no matter how many times you reformat your machine and reinstall the OS it's still there.
(1)
(0)
SSgt Mark Lines
Except for the one time with Fedora 12, I have always used the disk utility that came with the installer. It was very satisfying to watch Fedora 12 be deleted line by line from my system after spending 2 weeks fighting to get that release to work properly on my system.
I agree, having the UEFI mounted as rw is a hole that needs to be fixed. It is a personal nightmare of mine having my machine infected like that. That is the reason why my wife only uses the Linux install on my main computer. Bless her heart, no matter how much I try to teach her, she still doesn't understand that she does not need to click "OK" or "Accept" when a pop-up is displayed on the screen. While this solution is not perfect, it is the best available for our usage activities at this time.
I agree, having the UEFI mounted as rw is a hole that needs to be fixed. It is a personal nightmare of mine having my machine infected like that. That is the reason why my wife only uses the Linux install on my main computer. Bless her heart, no matter how much I try to teach her, she still doesn't understand that she does not need to click "OK" or "Accept" when a pop-up is displayed on the screen. While this solution is not perfect, it is the best available for our usage activities at this time.
(1)
(0)
SSG Nathaniel Bendel
Completely understand the desire to ritualistically kill an OS. Have been there before too. lol
I too am tired of fixing windows based machines for my family when someone clicks "OK". I'll be buying my wife a MacBook soon and was discussing putting Linux on my parents laptops. A major selling point was not needing to pay for antivirus subscriptions or Office upgrades anymore. I'll probably be going with Ubuntu just because it's one of the most user friendly distros out there for beginning Linux users.
I too am tired of fixing windows based machines for my family when someone clicks "OK". I'll be buying my wife a MacBook soon and was discussing putting Linux on my parents laptops. A major selling point was not needing to pay for antivirus subscriptions or Office upgrades anymore. I'll probably be going with Ubuntu just because it's one of the most user friendly distros out there for beginning Linux users.
(1)
(0)
SSgt Mark Lines
SSG Nathaniel Bendel - If your parents are Windows users, I would suggest either Linux Mint Cinnamon or Mate. It has been my experience that former Windows users get a little confused with Ubuntu's Unity. Cinnamon and Mate both give you all the latest DE enhancements with a look and feel of Windows. I personally use Cinnamon (it gets 2 Thai thumbs up from the wife), but I have put Mate on systems as well.
(1)
(0)
Thanks for sharing. I've never considered using anything over than UBCD to wipe my HD before distro-hopping.
(1)
(0)
SSgt Mark Lines
I know right. In the past it was a fun way to watch the distro you installed die. I did it with the mess that was Fedora 12. It seems to delete /sys/firmware/efi/efivars/ which is the location for the scripts the bios uses to run.
(1)
(0)
SGT (Join to see)
Well, that sounds like it would be an absolute headache if your data isn't backed up.
(1)
(0)
SSgt Mark Lines
SGT (Join to see) - Yup, and the time it would take to get your lappy back from the Service Center would also not be fun.
(1)
(0)
Having never used/fixed/smelled anything UEFI-related...
Wouldn't a similar problem be encountered with a HDD replacement?
Wouldn't a similar problem be encountered with a HDD replacement?
(0)
(0)
SSgt Mark Lines
No, they are two different things. Your hard drive holds your main operating system, such as Windows or in this case Linux, and is designed to be replaced as needed. The UEFI is the bios for your computer and is separate from the hard drive. It is like a mini operating system that manages all the hardware on your motherboard. It tells the operating system the information it needs to be able to use the hardware on your motherboard. The bios is not designed to be replaced and without it, your computer, will not turn on. You could push the power button all day, an nothing would happen.
(0)
(0)
SSgt Aaron P.
SSgt Mark Lines - I think this is the part that has me bound up. While the BIOS is held on a chip on the MB and a HDD, being separate from that holds the OS, how does the nefarious command effect the BIOS?
(0)
(0)
SSgt Mark Lines
SSgt Aaron P. - That is the crux of the whole matter, it shouldn't. For some reason on certain laptops it gains access to /sys/firmware/efi/efivars/ which essential for the bios to operate. This folder is normally a "protected" folder, can only be accessed from the UEFI bios, and is stored on the bios chip itself. I do not know if it is a flaw in how the UEFI bios was programmed on the effected systems or something else.
I showed this article to a friend of mine who is a Computer Science professor at the local uni, and he had the same question. Since there is an MSI and Asus service center in town, and they were willing to reflash the bios for us (for free), we decided to test it. We ran the command on 3 MSI and 2 Asus laptops, and it only bricked a two year old MSI laptop. He is just as flummoxed about it as I am.
For information, I have enclosed an example of a UEFI based bios.
I showed this article to a friend of mine who is a Computer Science professor at the local uni, and he had the same question. Since there is an MSI and Asus service center in town, and they were willing to reflash the bios for us (for free), we decided to test it. We ran the command on 3 MSI and 2 Asus laptops, and it only bricked a two year old MSI laptop. He is just as flummoxed about it as I am.
For information, I have enclosed an example of a UEFI based bios.
(0)
(0)
Read This Next