News for hackers. Stuff that matters.

A comment on A bunch of bored kids found a way to unenroll their school Chromebooks.

Re:A bunch of bored kids found a way to unenroll their schoo... by XionXIV on Monday January 30, 2023 @12:19PM (#34583021)
The silliest thing about it is probably this. Google seemed to have just kind of forgotten to add code that would verify the rootfs on shims, even though they had everything they needed to do it already set up.

https://chromium-review.googlesource.com/c/chromiumos/platfo...

[ Parent | on HN ]
Re:A bunch of bored kids found a way to unenroll their schoo... by andromeduck on Monday January 30, 2023 @01:26PM (#34584152)
That patch seems to be just checking more devices/partitions for images?
[ Parent | on HN ]
Re:A bunch of bored kids found a way to unenroll their schoo... by XionXIV on Monday January 30, 2023 @04:34PM (#34586747)
I'm not sure how to explain what is going on in there, but that is the patch for shimmer.
[ Parent | on HN ]
Re:A bunch of bored kids found a way to unenroll their schoo... by pifm_guy on Monday January 30, 2023 @11:18PM (#34591006)
The patch causes a different root filesystem to be used. Specifically, if the kernel command line specifies a root filesystem that must be used, then that one will always be mounted, even if other devices are available.
[ Parent | on HN ]