2 ms·
Enrolling an MOK requires physical access, so no, a root compromise isn't sufficient to change the boot security chain.
by mjg59 3y ago
Enrolling an MOK requires physical access, so no, a root compromise isn't sufficient to change the boot security chain.
- michaelt 3y ago...unless you've already got a MOK enrolled. For example, to install DKMS modules like nvidia drivers. Or indeed to exercise your right to run any code you like on the system you own.
- mjg59 3y agoYes, if you change the security state of your system, its security state is changed. This is, uh, unsurprising?