On Fri, Dec 25, 2015 at 2:29 PM, maderios <maderios(a)gmail.com> wrote:
On 12/25/2015 10:00 PM, Gordon Messmer wrote:
>
> On Thu, Dec 24, 2015 at 2:50 PM, maderios <maderios(a)gmail.com> wrote:
>>
>>
>> 'Secure boot' is just a windows problem. In Linux world, nobody uses
>> 'Secure
>> Boot'. In Windows world, they need it and they use it because Windows
>> system
>> is 'natively' insecured.
>
>
>
> Nonsense. Secure Boot secures Linux systems against rootkits, as
> well, by prohibiting unsigned content
Its' Redhat point of view...
I'm not specialist but, historically, I know Redhat dev asked Linus
Torvalds patch kernel with 'secure boot'
Linus Torvalds answer (2013):
You need to read the whole thread. It wasn't about just secure boot
yes or no in general. It had to do with enabling the use of keys in
PEs instead of only depending on X509 support in the kernel:
http://thread.gmane.org/gmane.linux.kernel/1445369/focus=1445405
and
http://thread.gmane.org/gmane.linux.kernel/1445369/focus=1445405
Are good summaries.
--
Chris Murphy