Messages in this thread | | | Date | Thu, 28 Feb 2013 20:31:36 +0000 | From | Matthew Garrett <> | Subject | Re: [GIT PULL] Load keys from signed PE binaries |
| |
On Thu, Feb 28, 2013 at 09:23:45PM +0100, Florian Weimer wrote: > * Matthew Garrett: > > grub's running before ExitBootServices(), because otherwise it has no > > way to actually read anything off disk. Or draw to the screen. > > Sorry, if Linux can read from the disk after ExitBootServices(), so > can a boot loader. Actually, we could boot Linux directly, with an > initrd which contains a boot selector, and use kexec if the chosen > kernel doesn't match the initial one.
"A bootloader" might be able to. grub can't.
-- Matthew Garrett | mjg59@srcf.ucam.org
| |