News for hackers. Stuff that matters.

A comment on Stable Linux mainline builds for Ubuntu. Parent comment

Re:Stable Linux mainline builds for Ubuntu by TacticalCoder on Friday August 25, 2023 @12:54PM (#37264019)
Ideally signing and enrolling in the UEFI the key to a signed Unified Kernel Image (UKI) makes more sense: only having SecureBoot verifying the kernel is okay'ish (and it does work: I tried modifying a single bit from my kernel and the UEFI refused to boot it) but it's not that great if the attacker can still modify the initrd etc.
[ Parent | on HN ]
Re:Stable Linux mainline builds for Ubuntu by rubicks on Friday August 25, 2023 @03:40PM (#37266165)
I thought "unified image" solved this?

https://wiki.archlinux.org/title/Unified_kernel_image#Prepar...

[ Parent | on HN ]
Re:Stable Linux mainline builds for Ubuntu by DHowett on Friday August 25, 2023 @03:49PM (#37266238)
Indeed, that is what the parent is referring to when they say this:

> Ideally signing and enrolling in the UEFI the key to a signed Unified Kernel Image (UKI) makes more sense

(It's much more useful to have a link to it, so thank you!)

[ Parent | on HN ]