On 06/18/2012 09:26 AM, Seth Johnson wrote:
On Mon, Jun 18, 2012 at 8:59 AM, Matthew Garrett
<mjg59(a)srcf.ucam.org> wrote:
> On Mon, Jun 18, 2012 at 08:45:07AM -0400, Seth Johnson wrote:
>> On Mon, Jun 18, 2012 at 7:43 AM, Matthew Garrett <mjg59(a)srcf.ucam.org>
wrote:
>>> The features you wanted in a free software UEFI are present in existing
>>> UEFI implementations, so I'm not sure what you're asking for.
>>
>> No need for a shim. Not having to ask permission. It's my
>> understanding that you are buying a signed key so the installation of
>> Fedora is not scary.
>
> You're still not making it clear what you want. Hardware without secure
> boot? Hardware with secure boot but a different default policy? Hardware
> with free firmware that may or may not have secure boot enabled by
> default?
Write a new UEFI. No need for a shim. Peter stated what the free
software UEFI on its own hardware should support: "disable Secure Boot
or use your own chain of trust."
This is what current x86 UEFI implementations give us.
Plus, because you appear to be motivated to buy a shim for this
reason, write
the UEFI so it does not make it scary to install in any configuration you use
as the empowered owner of the device.
Buy a what now? shim is a piece of software Matthew has been writing. We're
not talking about buying any software.
--
Peter