lkml.org 
[lkml]   [2018]   [Apr]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    Date
    SubjectRe: [GIT PULL] Kernel lockdown for secure boot
    On Wed, Apr 4, 2018 at 5:05 PM Peter Dolding <oiaohm@gmail.com> wrote:

    > > If you don't have secure boot then an attacker with root can modify your
    > > bootloader or kernel, and on next boot lockdown can be silently
    disabled.

    > Stop being narrow minded you don't need secure boot to protect
    > bootloader or kernel the classic is only boot from read only media.

    And if you use another protected path you can set the appropriate bootparam
    flag or pass the appropriate kernel command line argument and gain the same
    functionality.

    \
     
     \ /
      Last update: 2018-04-05 02:21    [W:7.413 / U:0.036 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site