Re: secure boot: how to disable this crap?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 





2012/10/28 Kevin Kofler <kevin.kofler@xxxxxxxxx>
Joshua C. wrote:
> Over the last months there have been many patches to the rawhide-kernel
> and rawhide-grub2 packages that aim to make those compatible with the M$
> requirements for secure boot. Those locked down many user space
> capabilities. However I still haven't seen any single "magic" switch that
> can disable all this crap at once during compilation. As a result I cannot
> port grub2 and the rawhide kernel to the current f17. I can simply
> recompile the packages against f17 but all those lockups will still stay
> in place :-(
>
> Can someone point me to this switch (option, parameter, etc) so that I can
> recomile and strip down those packages of all this crap?

AIUI, those lockdowns are supposed to only apply if Restricted ("Secure")
Boot is supported by and enabled in the BIOS (or rather, the UEFI firmware;
traditional BIOSes don't have that misfeature).

        Kevin Kofler


I see but is there a general switch do disable those even if secure boot is set to enable in the uefi firmware?

Honestly looking into the latest patch applied to the rawhide-kernel, I cannot see any indication that those lockups occur only if secure boot is set in the uefi firmware. They just lock out the user space regardless of what the uefi says...

--
--joshua
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux