> So as far as the narrow question of whether we should accept these > patches, I think it's a good thing. Personally, I'm always going to > be disabling UEFI secure boot (even if it doesn't brick my laptop), > because for me, the security guarantees it provides isn't worth it. > But there will be people who want to be able to install Linux on > Windows 8 certified PC's without tweaking BIOS settings, so merging > the UEFI secure boot is a good thing, so long as those of use who > don't want to have anything to do with UEFI secure boot can disable > it. I definitely think we want the feature and there are a lot of non UEFI reasons for this (eg running trusted_kernel() virtual namespaces). I have three specific issues 1. The implementation is a mess in part because it propogates more policy all over the place that should be separated. Root cause capable() mixes policy and activity. Fix suggested in my previous emails (and offer to do the work) 2. It's likely to lead to more bugs and errors because of the way it has been done and it doesn't break old code that gets added without considering the issue. It fails insecure which is bad. Fixed by doing what I suggested (and offered to do) 3. For things like module options we should be white not blacklisting 'bad' ones. I've offered to go and fix up the capability stuff - I'm just waiting for Matthew to actually confirm the question I specifically asked him - does this solve that bit of his problem. If it does great, I'll go and sort the capability bits out so we can keep the policy in the right place and we don't have the kernel festooned with && !trusted_kernel() everywhere. There is a question of completeness but its very clear we get there with a combination of two things - whitelisting so we catch stuff we missed rather than leave holes, and just accepting the reality that it'll take a few kernels once its upstream until we get them all. I care about security, we should do the job properly. We have a further magnitude shift in security needs coming that's going to be at least equivalent to the scale of shift between the old 'university, everyone is nice' internet and today. Alan -- To unsubscribe from this list: send the line "unsubscribe linux-efi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
