Linux Kernel Lockdown and UEFI Secure Boot

Re:Linux Kernel Lockdown and UEFI Secure Boot by dingo_bat on Thursday April 05, 2018 @06:05AM (#16763384)

> the goal of the lockdown mode is to prevent someone who has UID=0 ("root") in the kernel from being able to modify or tamper with it (ring0 / CPL0 access)

Exactly, and that's why lockdown and secure boot must be discarded. These are attempts to take control away from the user and give it to the OS maker or device manufacturer. This is exactly why I cannot root my android without losing hardware features and this is exactly why ios devices are not general purpose computers.

Fuck these anti-user efforts. They have no place in Linux.

[ Parent | on HN ]

Re:Linux Kernel Lockdown and UEFI Secure Boot by mjg59 on Thursday April 05, 2018 @06:13AM (#16763421)

All Linux distributions that support UEFI secure boot allow you to disable any restrictions if you have physical access to the machine. If you have a device vendor who's implemented something more restrictive, blame the device vendor rather than the software.

[ Parent | on HN ]

Re:Linux Kernel Lockdown and UEFI Secure Boot by throwaway2048 on Thursday April 05, 2018 @01:11PM (#16766775)

or blame the FLOSS people working so hard to enable them.

[ Parent | on HN ]

Re:Linux Kernel Lockdown and UEFI Secure Boot by viraptor on Thursday April 05, 2018 @07:30AM (#16763781)

This is only anti-user from one point of view (where jailbreaking is beneficial). It's completely pro-user, where the user wants to ensure that the environment is what they expect it to be. It really depends on who the user is and what they want to achieve.

Otherwise you could describe something like process memory protection the same way: not being able to read/write directly to a root process is taking the control away from the user after all.

[ Parent | on HN ]

Re:Linux Kernel Lockdown and UEFI Secure Boot by shawnz on Thursday April 05, 2018 @10:04AM (#16764970)

> this is exactly why ios devices are not general purpose computers.

What general purpose computation requires root?

[ Parent | on HN ]

Re:Linux Kernel Lockdown and UEFI Secure Boot by teknopaul on Thursday April 05, 2018 @08:06AM (#16763996)

I second this. I use linux because i want root. Linux needs users to be kernel devs. If hardware vendors want to lock down kernels let them patch in the lockdown.

[ Parent | on HN ]