| |||||||||||||
Implementing UEFI Secure Boot in FedoraImplementing UEFI Secure Boot in FedoraPosted Jun 2, 2012 17:36 UTC (Sat) by mjg59 (subscriber, #23239)In reply to: Implementing UEFI Secure Boot in Fedora by micka Parent article: Implementing UEFI Secure Boot in Fedora
That's true, but the obvious alternative has an unacceptable (>0) false negative rate.
(Log in to post comments)
Implementing UEFI Secure Boot in Fedora Posted Jun 2, 2012 17:59 UTC (Sat) by micka (subscriber, #38720) [Link]
OK, let's say it like that : some people who install wireshark/nessus/whatever use it to crack into systems, so people should be forbidden to get those programs...
That's the same reasoning.
Implementing UEFI Secure Boot in Fedora Posted Jun 2, 2012 18:02 UTC (Sat) by mjg59 (subscriber, #23239) [Link]
Nobody's forbidding anyone from running anything. It's a matter of default policy. The default policy being imposed here is that only signed code should be able to directly influence hardware behaviour. Signing a bootloader that then executes unsigned code is a pretty obvious circumvention of that policy.
|
|||||||||||||