I&#x27;m curious, what kind of userspace application needs r&#x2F;w access to EFI vars?<p>I would think a) this are mostly system tools like boot managers and b) these tools need root (or setuid root) anyway, so why can&#x27;t they just mount it themselves temporarily?<p>Edit: It seems it is mostly grub-install, efibootmgr, and `systemctl reboot --firmware` that need this mounted rw. The first two aren&#x27;t something that a casual user uses very often, and if someone does, a &quot;Filesystem is mounted read-only&quot; message will point them in the right direction. The latter is part of systemd and could easily be changed to mount efivarfs itself, no third party involved.