4 ms·
Are you planning to ship systems that don't have Boot Guard enforcement enabled? I've done a couple of Coreboot ports (I'm typing from a laptop that's running m
by mjg59 5y ago
Are you planning to ship systems that don't have Boot Guard enforcement enabled? I've done a couple of Coreboot ports (I'm typing from a laptop that's running my build) and the Framework is an extremely interesting target, but if Boot Guard is turned on then that becomes pretty difficult.
- nrp 5y agoWe haven't finalized our plans around this, but one path we have explored is a signed shim loader.
- mjg59 5y agoAh, so a signed firmware bootblock that runs something user signed? I wrote the original version of the boot Shim that Linux distros use for bridging from the Microsoft root of trust to the distro one, so let me know if there's any way I can help out here.
- nrp 5y agoYep! It's great to hear that, and I would definitely be interested in chatting. I've DMed you on twitter.