On Mon, Jun 18, 2012 at 8:59 AM, Matthew Garrett <mjg59(a)srcf.ucam.org> wrote:
On Mon, Jun 18, 2012 at 08:45:07AM -0400, Seth Johnson wrote:
> On Mon, Jun 18, 2012 at 7:43 AM, Matthew Garrett <mjg59(a)srcf.ucam.org> wrote:
> > The features you wanted in a free software UEFI are present in existing
> > UEFI implementations, so I'm not sure what you're asking for.
>
> No need for a shim. Not having to ask permission. It's my
> understanding that you are buying a signed key so the installation of
> Fedora is not scary.
You're still not making it clear what you want. Hardware without secure
boot? Hardware with secure boot but a different default policy? Hardware
with free firmware that may or may not have secure boot enabled by
default?
Write a new UEFI. No need for a shim. Peter stated what the free
software UEFI on its own hardware should support: "disable Secure Boot
or use your own chain of trust." Plus, because you appear to be
motivated to buy a shim for this reason, write the UEFI so it does not
make it scary to install in any configuration you use as the empowered
owner of the device.
Seth