Defending mounted filesystems from the root user

Posted Aug 27, 2023 14:04 UTC (Sun) by Baughn (subscriber, #124425)
In reply to: Defending mounted filesystems from the root user by NYKevin
Parent article: Defending mounted filesystems from the root user

> * We could say "if you want to modify your kernel, either don't enable secureboot, or reimage your kernel with the appropriate changes pre-configured."

I have a computer that doesn’t boot with Secureboot disabled. They seem to be getting more common.

At the moment, I’m still able to use it as a regular computer thanks to Linux not locking itself down hard enough to stop me modifying the kernel. If a rule like that was added, then i suppose it’s game over.