Messages in this thread | | | From | Andy Lutomirski <> | Date | Tue, 3 Apr 2018 12:01:08 -0700 | Subject | Re: [GIT PULL] Kernel lockdown for secure boot |
| |
> On Apr 3, 2018, at 10:16 AM, David Howells <dhowells@redhat.com> wrote: > > Andy Lutomirski <luto@kernel.org> wrote: > >>> A kernel that allows users arbitrary access to ring 0 is just an >>> overfeatured bootloader. Why would you want secure boot in that case? >> >> To get a chain of trust. > > You don't have a chain of trust that you can trust in that case. >
Please elaborate on why I can’t trust it. Please also elaborate on how lockdown helps at all.
| |