Messages in this thread | | | Date | Mon, 07 Nov 2011 12:57:40 -0800 | From | "H. Peter Anvin" <> | Subject | Re: [PATCH v3] x86, efi: Calling __pa() with an ioremap'd address is invalid |
| |
On 11/07/2011 12:48 PM, Matthew Garrett wrote: > > If the kernel is able to call boot services then the kernel needs to be > signed. If it's all handled by the bootloader then the bootloader can be > signed and the kernel doesn't have to be. Depends which one people > update more, I guess. >
... and what security attributes they are looking for.
However, "EFI stub in the kernel" doesn't mean "can't use an external bootloader."
-hpa
| |