News for hackers. Stuff that matters.

A comment on Fixing Getrandom(). Parent comment

Re:Fixing Getrandom() by dependenttypes on Tuesday October 01, 2019 @05:12PM (#21130712)
> We have to trust the bootloader to verify the digital signature on the kernel

Do we? I was under the impression that most people would not care if the bootloader did that or not.

[ Parent | on HN ]
Re:Fixing Getrandom() by cryptonector on Tuesday October 01, 2019 @06:11PM (#21131313)
If you want secure boot then you want the BIOS/UEFI to verify a signature on a boot loader which then has to verify the signature on a kernel which then has to verify filesystems' ubberblock checksums (which should be signed in the boot manifest, which signature should be verified too).
[ Parent | on HN ]
Re:Fixing Getrandom() by dependenttypes on Tuesday October 01, 2019 @07:06PM (#21131844)
Most people to my knowledge do not use secure boot out of choice but rather because it was forced on them.
[ Parent | on HN ]