4 ms·
https://mjg59.dreamwidth.org/55845.html https://mjg59.dreamwidth.org/55845.html I was referring to this.
by captn3m0 5y ago
https://mjg59.dreamwidth.org/55845.html https://mjg59.dreamwidth.org/55845.html
I was referring to this.
- vesinisa 5y agoAFAIK this is only an issue if you think UEFI Secure Boot and TPM are a good idea. The traditional way to implement full-disk encryption on Linux is by disabling UEFI validation and deriving the key from a passphrase rather than storing it in the TPM.
- d110af5ccf 5y agoPersonally I'd rather keep secure boot and just disable the kernel lockdown feature. You still gain a significant amount of security while maintaining functionality that way.