this post was submitted on 18 Sep 2023
23 points (92.6% liked)
Linux
47119 readers
1338 users here now
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
No, because either the initrd is signed, built into a signed unified kerbel image, or it's encrypted like on my setup (where everything but the grubx64.efi binary is encrypted and that binary is signed).
You mean, like, there's some more setup you need to do in order to build some actual resistance against evil maids; making secure boot a small part of a greater link?
Also, I still wouldn't count such a setup as "half-way resistant against evil maids" as, in a setup like you describe, it's almost trivial for an evil maid to go into firmware to disable secure boot and install their own bootloader instead of yours.
Well, they don't seem to be replying to this post, so I guess we will never know if they have a BIOS password or even are signing or encrypting their initrd.
I still can't figure out how to tag people from eternity (infinity for lemmy).