Re: Campaign against Secure Boot

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On Mon, 25 Jun 2012 10:35:16 +0200
Thomas Bächler <thomas@xxxxxxxxxxxxx> wrote:

> Am 23.06.2012 04:09, schrieb Manolo Martínez:
> > Is Arch going to sign [this
> > petition](http://www.fsf.org/campaigns/secure-boot-vs-restricted-boot/statement)?
> > I, for one humble user, would like it (us, whatever) to.
> > 
> > Manolo
> 
> While I won't answer your question, I have this to say:
> 
> For a non-ARM PC to be certified for Windows 8, the EFI firmware MUST
> support Setup Mode. As this is a "MUST" requirement, everyone will
> fulfill it, as they really do want the Windows 8 logo (if anyone wants
> to look up the source for this, go ahead, I am too lazy right now).
> 
> If I understand it right, in Setup Mode, you can either boot any
> non-signed operating system, or you can import your own keys into the
> firmware, so that you can sign your own bootloaders. For me, this is
> enough to not care about Secure Boot.
> 

Right. Or you can buy a key from Microsoft like Fedora is planning to
http://lwn.net/Articles/500231/. It's good that people are thinking about
this problem, but so far solutions have been quite ugly from a technical
standpoint.

-- 
Leonid Isaev
GnuPG key: 0x164B5A6D
Fingerprint: C0DF 20D0 C075 C3F1 E1BE  775A A7AE F6CB 164B 5A6D

Attachment: signature.asc
Description: PGP signature


[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Share Photos]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]
  Powered by Linux