Re:Announcing Ubuntu Core, with snappy transactional updates
by dmix on Tuesday December 09, 2014 @02:19PM
(#8724976)
Any word if these kernel updates will support EFI secure-boot or dm-verity [0]? This is pretty essential these days given how EFI bootkits are a very real threat.
This has been part of the kernel and Ubuntu for a while but this new workflow changes this up a bit.
The only mention of security is the use of user-space AppArmor MAC and sandboxing but no mention of whether image-based updates can support updating a block signature.
This has been part of the kernel and Ubuntu for a while but this new workflow changes this up a bit.
The only mention of security is the use of user-space AppArmor MAC and sandboxing but no mention of whether image-based updates can support updating a block signature.
[0] http://lwn.net/Articles/459420/