Not logged in
Log in now
Create an account
Subscribe to LWN
LWN.net Weekly Edition for May 16, 2013
A look at the PyPy 2.0 release
PostgreSQL 9.3 beta: Federated databases and more
LWN.net Weekly Edition for May 9, 2013
(Nearly) full tickless operation in 3.10
That is hyperbole and is not what secure boot on x86 does. It'd be great if we could stick to a discussion based on the facts.
No signed kernel, just a signed boot loader
Posted Jun 25, 2012 21:28 UTC (Mon) by pboddie (subscriber, #50784)
And I'm sure it's not beyond the skills of the vendors to make installing one's own keys a near impossibility and then claiming it was an accident for as long as it takes before they can then claim that the product is no longer supported.
So in practical terms, it is all about control. We can discuss technical workarounds as much as we like and deny that the technology imposes any particular restrictions, but the combination of one company's continuous strategy of pushing the regulatory envelope and that technology results in a shoring up of that company's position.
Why else are the distributions jumping through hoops? Because they like a challenge? The practical effect of the misuse of such a technology is as much a fact as any aspect of the "it's OK - I can still boot my kernel" technical discussion.
Posted Jun 25, 2012 21:40 UTC (Mon) by raven667 (subscriber, #5198)
So we agree on the substance of the matter. I can't comment on the rest of your post because I can't find any facts or point, just a lot of rhetorical flailing about.
Posted Jun 26, 2012 11:03 UTC (Tue) by pboddie (subscriber, #50784)
Posted Jun 26, 2012 18:10 UTC (Tue) by marcH (subscriber, #57642)
> > you can sign your own payloads and install your own keys
> So we agree on the substance of the matter. I can't comment on the rest of your post because I can't find any facts or point, just a lot of rhetorical flailing about.
Too bad things are not that obvious to Fedora and Canonical. They should have hired you and saved a lot of effort.
Posted Jun 26, 2012 19:14 UTC (Tue) by raven667 (subscriber, #5198)
Foolish on my part I suppose. http://xkcd.com/386/
Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds