3 ms·
The GPL3 sees the signing keys are part of the source code, so they have to be provided along with the binaries. The relevant part of the license is in section
by s_tec 14y ago
The GPL3 sees the signing keys are part of the source code, so they have to be provided along with the binaries. The relevant part of the license is in section 6, third paragraph from the bottom. If an OEM ships a signed copy of Grub 2, the license states that they need to provide the keys as well. The fact that the keys come from a third party (Canonical) makes no difference here. The keys still need to be provided.
- papercrane 14y agoI don't think the license says the keys are part of the source code. It says they have to provide information on how to run your own modified version of the software. In this case it would be as simple as allowing the user to install their own key or disable secure boot. If an OEM didn't do that and pre-installed Ubuntu on the machine there is no way that Ubuntu would be required to reveal their private key, they did nothing wrong, the OEM is the one who violated the license and they are on the hook for damages.