Language Selection

English French German Italian Portuguese Spanish

Why UEFI secure boot is difficult for Linux

Filed under
Linux

I wrote about the technical details of supporting the UEFI secure boot specification with Linux. Despite me pretty clearly saying that this was ignoring issues of licensing and key distribution and the like, people are now using it to claim that Linux could support secure boot with minimal effort. In a sense, they're right. The technical implementation details are fairly straightforward. But they're not the difficult bit.

Secure boot requires that all code that can touch hardware be trusted

Right now, if you can run unstrusted code before the OS then you can subvert the OS. Secure boot gives you a mechanism for making sure you only run trusted code, which protects against that. So your UEFI drivers have to be signed, your bootloader has to be signed, and your bootloader must only load a signed kernel. If you've only booted trusted code then you know that your OS is safe. But, unlike trusted boot, secure boot provides no way for you to know that only trusted code was executed. That has to be ensured by OS policy.

Rest here




More in Tux Machines

VLC 2.2.0 Codenamed WeatherWax Released, Install/Upgrade In Ubuntu/Linux Mint


VLC 2.2.0 WeatherWax released, install in Ubuntu/Linux

VLC player is an open-source software that can play most multimedia files as well as DVD, Audio CD, VCD, and various streaming protocol. VLC is a cross platforms that runs on most major platforms including Linux obviously. Team released VLC 2.2.0 codenamed WeatherWax for the first time with release on iOS, Android (including Android TV), WinRT and Windows Phone with more that one thousand bug fixes.

Read at LinuxAndUbuntu

LibreOffice 4.4.1 Released With Over 100 Fixes, Install/Update To LibreOffice 4.4.1 In Ubuntu/Linux Mint


download libreoffice 4.4.1 and upgrade in ubuntu/linux mint

LibreOffice Recently released its first release LibreOffice 4.4.1 of the LibreOffice 4.4 that was released in the last of January 2015. LibreOffice is an open source and the most popular office suit available for all major platforms.
 
 

Read at LinuxAndUbuntu