3 ms·
How do desktop Linux distros avoid attackers from rolling back the operating system to a vulnerable, but signed version?
by charcircuit 4mo ago
How do desktop Linux distros avoid attackers from rolling back the operating system to a vulnerable, but signed version?
- Sateallia 4mo agoThis is not an issue specific to Linux, Windows installations can be downgraded as well. As for the mechanism, UEFI devices, alongside key updates, also get revocation list updates.
- charcircuit 4mo agoStrangely I feel like I've never seen one of these. It would be needed after every major kernel / user land exploit. It would also need rollback protection on the motherboard itself so you couldn't just remove the updated keys / revocations.