4 ms·
> Speaking of SecureBoot and how practically no Linux distribution actually makes use of its potential (in terms of increasing security) In Ubuntu and Fedora y
by josteink 6y ago
> Speaking of SecureBoot and how practically no Linux distribution actually makes use of its potential (in terms of increasing security)
In Ubuntu and Fedora you can’t load unsigned kernel-modules when using secure boot.
How does that not increase security?
- Avamander 6y agoI'm pretty sure both Ubuntu and Fedora installers display and have the option for MOK enrollment, when you have SB enabled and you select ~"Install additional drivers", meaning you can install your own modules.
- codethief 6y agoUbuntu's (and to my knowledge also Fedora's) boot chain is not fully validated. An evil maid can easily swap out the initramfs.