| |||||||||||||
Fedora, secure boot, and an insecure futureFedora, secure boot, and an insecure futurePosted Jun 14, 2012 5:07 UTC (Thu) by kevinm (guest, #69913)In reply to: Fedora, secure boot, and an insecure future by pjones Parent article: Fedora, secure boot, and an insecure future
It doesn't matter if you release an update for the signed bootloader that refuses to boot the known-buggy kernel, because the original signed bootloader that *doesn't* have that update is still out in the wild. Malware that wants to take over Windows machines will simply use the un-updated signed bootloader together with the signed buggy kernel.
(Log in to post comments)
Fedora, secure boot, and an insecure future Posted Jun 14, 2012 12:03 UTC (Thu) by mjg59 (subscriber, #23239) [Link]
That's why you're able to revoke binaries at the firmware level.
|
|||||||||||||