* Theodore Ts'o: > Right now, even though Lenovo laptops are shipping with Windows > 8. UEFI secure boot is not made mandatory (although it is on enough to > brick the laptop when it runs into bugs wwith the UEFI BIOS code, > sigh). But sooner or later, UEFI secure boot will be on by default, > and then if Linux distros don't have kernels where the installer can > be run without needing to twiddle BIOS settings, it might make it > harder for the "Year of the Desktop" to come about. Windows 8 logo devices already enable Secure Boot by default. One aspect which makes all this really tricky is that Microsoft is watching what we're doing and will keep raising the bar, probably not with the intent to lock us out completely, but sufficiently high to make things quite annoying. For example, any certificate-signing certificate in the boot process needs to be an EV CA certificate, which comes with fairly stringent requirements that are quite costly to implement. So any restrictions we implement as a good-will gesture will eventually come back to haunt us. -- To unsubscribe from this list: send the line "unsubscribe linux-efi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
