| |||||||||||||
Implementing UEFI Secure Boot in FedoraImplementing UEFI Secure Boot in FedoraPosted Jun 1, 2012 2:26 UTC (Fri) by slashdot (guest, #22014)In reply to: Implementing UEFI Secure Boot in Fedora by Cyberax Parent article: Implementing UEFI Secure Boot in Fedora
Is there really a revocation system for secure boot?
The way the system is described, it gives me the impression that there is just a static key/certificate, and you can't blacklist anything.
(Log in to post comments)
Implementing UEFI Secure Boot in Fedora Posted Jun 1, 2012 2:35 UTC (Fri) by jk (guest, #31383) [Link]
There is indeed a revocation system: software is able to add blacklist entries, which may be a hash of a binary, or a key (revoking access to all binaries relying on that key).
However, updating the revocation lists requires your updates to be signed with a key that is already present in firmware.
|
|||||||||||||