# "bootctl install" outputs some warnings about /efi mount point and random seed file in the terminal

**URL:** <https://forum.endeavouros.com/t/bootctl-install-outputs-some-warnings-about-efi-mount-point-and-random-seed-file-in-the-terminal/43991>\
**Category:** EndeavourOS installation\
**Created:** [August 1, 2023, 8:49pm UTC](https://forum.endeavouros.com/t/bootctl-install-outputs-some-warnings-about-efi-mount-point-and-random-seed-file-in-the-terminal/43991 "2023-08-01T20:49:27Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![pebcak](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pebcak/32/100472_2.png) [@pebcak](https://forum.endeavouros.com/u/pebcak)\
**Post date:** [August 1, 2023, 8:49pm UTC](https://forum.endeavouros.com/t/bootctl-install-outputs-some-warnings-about-efi-mount-point-and-random-seed-file-in-the-terminal/43991/1 "2023-08-01T20:49:27Z")

</div>

I needed to recreate my systemd-boot’s EFI boot entry in an oldish system converted from Grub.

I did a `sudo bootctl install` and I got the output here below:

```auto
Copied "/usr/lib/systemd/boot/efi/systemd-bootx64.efi" to "/efi/EFI/systemd/systemd-bootx64.efi".
Copied "/usr/lib/systemd/boot/efi/systemd-bootx64.efi" to "/efi/EFI/BOOT/BOOTX64.EFI".
⚠️ Mount point '/efi' which backs the random seed file is world accessible, which is a security hole! ⚠️
⚠️ Random seed file '/efi/loader/random-seed' is world accessible, which is a security hole! ⚠️
Random seed file /efi/loader/random-seed successfully refreshed (32 bytes).
Created EFI boot entry "Linux Boot Manager".

```

I have done a quick search in www but I haven’t found anything related to these warnings.

Does anyone know what these are about and how I could fix it?

`drwxr-xr-x 8 root root 4096 Jan 1 1970 efi`

```auto
ls -al /efi/loader/
total 24
drwxr-xr-x 3 root root 4096 Aug 1 22:27 .
drwxr-xr-x 8 root root 4096 Jan 1 1970 ..
drwxr-xr-x 2 root root 4096 Jun 16 19:22 entries
-rwxr-xr-x 1 root root 6 Sep 15 2022 entries.srel
-rwxr-xr-x 1 root root 71 Apr 26 20:47 loader.conf
-rwxr-xr-x 1 root root 32 Aug 1 22:27 random-seed

```

---

<div class="post-metadata">

**Author:** ![dalto](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/dalto/32/5577_2.png) [@dalto](https://forum.endeavouros.com/u/dalto)\
**Post date:** [August 1, 2023, 8:53pm UTC](https://forum.endeavouros.com/t/bootctl-install-outputs-some-warnings-about-efi-mount-point-and-random-seed-file-in-the-terminal/43991/2 "2023-08-01T20:53:53Z")

</div>

```plaintext
sudo chmod o-rwx /efi/loader/random-seed
sudo chmod o-rwx /efi

```

---

<div class="post-metadata">

**Author:** ![pebcak](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pebcak/32/100472_2.png) [@pebcak](https://forum.endeavouros.com/u/pebcak)\
**Post date:** [August 1, 2023, 9:02pm UTC](https://forum.endeavouros.com/t/bootctl-install-outputs-some-warnings-about-efi-mount-point-and-random-seed-file-in-the-terminal/43991/3 "2023-08-01T21:02:31Z")

</div>

Thank you so much @dalto for the swift reply!

I executed the two chmod commands.  
I ran the` bootctl install` once again to test.  
I’m still getting:

```auto
⚠️ Mount point '/efi' which backs the random seed file is world accessible, which is a security hole! ⚠️
⚠️ Random seed file '/efi/loader/random-seed' is world accessible, which is a security hole! ⚠️

```

What am I missing?

---

<div class="post-metadata">

**Author:** ![dalto](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/dalto/32/5577_2.png) [@dalto](https://forum.endeavouros.com/u/dalto)\
**Post date:** [August 1, 2023, 9:13pm UTC](https://forum.endeavouros.com/t/bootctl-install-outputs-some-warnings-about-efi-mount-point-and-random-seed-file-in-the-terminal/43991/4 "2023-08-01T21:13:24Z")

</div>

What does `ls -ld /efi` show?

---

<div class="post-metadata">

**Author:** ![pebcak](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pebcak/32/100472_2.png) [@pebcak](https://forum.endeavouros.com/u/pebcak)\
**Post date:** [August 1, 2023, 9:16pm UTC](https://forum.endeavouros.com/t/bootctl-install-outputs-some-warnings-about-efi-mount-point-and-random-seed-file-in-the-terminal/43991/5 "2023-08-01T21:16:13Z")

</div>

```auto
$ ls -ld /efi
drwxr-xr-x 8 root root 4096 Jan 1 1970 /efi

```

It seems that the chmod command didn’t change any permissions?

---

<div class="post-metadata">

**Author:** ![dalto](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/dalto/32/5577_2.png) [@dalto](https://forum.endeavouros.com/u/dalto)\
**Post date:** [August 1, 2023, 9:23pm UTC](https://forum.endeavouros.com/t/bootctl-install-outputs-some-warnings-about-efi-mount-point-and-random-seed-file-in-the-terminal/43991/6 "2023-08-01T21:23:21Z")

</div>

> [@pebcak](#):
>
> It seems that the chmod command didn’t change any permissions?

Hahaha…it is because it is fat32.

You need to change the permissions in `/etc/fstab` and remount it.

Maybe add `fmask=0137,dmask=0027` to options.

---

<div class="post-metadata">

**Author:** ![pebcak](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pebcak/32/100472_2.png) [@pebcak](https://forum.endeavouros.com/u/pebcak)\
**Post date:** [August 1, 2023, 9:29pm UTC](https://forum.endeavouros.com/t/bootctl-install-outputs-some-warnings-about-efi-mount-point-and-random-seed-file-in-the-terminal/43991/7 "2023-08-01T21:29:31Z")

</div>

> [@dalto](#):
>
> > [@pebcak](#):
> >
> > It seems that the chmod command didn’t change any permissions?
> 
> Hahaha…it is because it is fat32.

🤦🏽‍♂️

Obvious now when you mention it 😅

> [@dalto](#):
>
> You need to change the permissions in `/etc/fstab` and remount it.
> 
> Maybe add `fmask=0137,dmask=0027` to options.

Will do right away and report back.

---

<div class="post-metadata">

**Author:** ![pebcak](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/pebcak/32/100472_2.png) [@pebcak](https://forum.endeavouros.com/u/pebcak)\
**Post date:** [August 1, 2023, 9:45pm UTC](https://forum.endeavouros.com/t/bootctl-install-outputs-some-warnings-about-efi-mount-point-and-random-seed-file-in-the-terminal/43991/8 "2023-08-01T21:45:08Z")

</div>

In `/etc/fstab`

`UUID=5C1D-26F4 /efi vfat rw,relatime,fmask=0137,dmask=0027,errors=remount-ro 0 2`

```auto
$ sudo bootctl install 
Copied "/usr/lib/systemd/boot/efi/systemd-bootx64.efi" to "/efi/EFI/systemd/systemd-bootx64.efi".
Copied "/usr/lib/systemd/boot/efi/systemd-bootx64.efi" to "/efi/EFI/BOOT/BOOTX64.EFI".
Random seed file /efi/loader/random-seed successfully refreshed (32 bytes).
Created EFI boot entry "Linux Boot Manager".

```

You did it! Again! 😉 😄  
Thank you @dalto!

Marked it solved ✅

---

<div class="post-metadata">

**Author:** ![anon49550872](https://forum.endeavouros.com/letter_avatar_proxy/v4/letter/a/b2d939/32.png) [@anon49550872](https://forum.endeavouros.com/u/anon49550872)\
**Post date:** [August 1, 2023, 11:25pm UTC](https://forum.endeavouros.com/t/bootctl-install-outputs-some-warnings-about-efi-mount-point-and-random-seed-file-in-the-terminal/43991/9 "2023-08-01T23:25:07Z")

</div>

This fixed for me too, thanks 👍

---

<div class="post-metadata">

**Author:** ![system](https://forum.endeavouros.com/uploads/default/original/2X/9/9ea52f9fd5ef8e609e593c362d61a36295f48be8.png) [@system](https://forum.endeavouros.com/u/system)\
**Post date:** [August 3, 2023, 11:25pm UTC](https://forum.endeavouros.com/t/bootctl-install-outputs-some-warnings-about-efi-mount-point-and-random-seed-file-in-the-terminal/43991/10 "2023-08-03T23:25:50Z")

</div>

Closed on August 3, 2023, 11:25pm UTC

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.
