LWN.net Logo

Signed bootloader without verification?

Signed bootloader without verification?

Posted Jun 6, 2012 10:00 UTC (Wed) by jamesh (guest, #1159)
In reply to: Signed bootloader without verification? by Richard_J_Neill
Parent article: Fedora, secure boot, and an insecure future

Matthew's article mentions that. If you have a version of Grub that can boot in a secure boot scenario but will run any kernel, then it can be used to subvert the system (e.g. create a new UEFI environment that claims to have secure boot enabled and then boot Windows with it).

While Windows 8 lets you run unsigned applications, it seems that it won't let you load unsigned drivers so that is a bit different to Grub running arbitrary kernels.


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds