News for hackers. Stuff that matters.

A comment on Stop Disabling SELinux: A Real-World Guide. Parent comment

Re:Stop Disabling SELinux: A Real-World Guide by Eiriksmal on Saturday February 04, 2017 @01:46AM (#13565969)
Microsoft's Secure Boot in the UEFI isn't SELinux[0]. It's actually not difficult to get VBox/VMWare to play nice with secure boot[1], once you've generated your custom signing keys. I keep a .sh on my machine to sign the latest kernel after each `dnf update`. Weirdly, my laptop had trouble booting with Secure Boot disabled so I was forced to figure out how to get them to play nice.

[0] https://docs.fedoraproject.org/en-US/Fedora/18/html/UEFI_Sec...

[1] http://gorka.eguileor.com/vbox-vmware-in-secureboot-linux/

[ Parent | on HN ]
Re:Stop Disabling SELinux: A Real-World Guide by josteink on Saturday February 04, 2017 @02:06AM (#13566023)
> Microsoft's Secure Boot in the UEFI isn't SELinux

You may be absolutely right here and I may have incorrectly conflated the issues.

That said it's UEFI secure boot, not Microsoft secure boot.

Microsoft helped create the spec, but anyone is free to implement it and use it without any Microsoft involvement.

Maybe you're conflating some things too ;)

[ Parent | on HN ]