Practical security for 2014 [LWN.net]

Practical security for 2014

Posted Jan 13, 2014 18:23 UTC (Mon) by khim (subscriber, #9252)
In reply to: Practical security for 2014 by epa
Parent article: Practical security for 2014

This will not work. Said code would need to be kept in some separate database to make sure warranty is properly voided when bootloader is unlocked. But if don't mind voided warranty then you can already remove washer so what's the point?

to post comments

Practical security for 2014

Posted Jan 17, 2014 9:49 UTC (Fri) by robbe (guest, #16131) [Link] (1 responses)

Isn't Matthew's criticism that removing the washer does away with Secure Boot altogether (i.e. it removes any precieved security)?

Practical security for 2014

Posted Jan 17, 2014 13:28 UTC (Fri) by mjg59 (subscriber, #23239) [Link]

Removing the washer allows you to reflash your own keys. You then need to replace the washer in order to re-enable security, otherwise anyone who gains root can replace your keys.