From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from list by lists.gnu.org with archive (Exim 4.71) id 1ad2Zb-00023F-JW for mharc-grub-devel@gnu.org; Mon, 07 Mar 2016 16:20:15 -0500 Received: from eggs.gnu.org ([2001:4830:134:3::10]:57021) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ad2ZY-0001yY-OA for grub-devel@gnu.org; Mon, 07 Mar 2016 16:20:13 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ad2ZU-00035w-JL for grub-devel@gnu.org; Mon, 07 Mar 2016 16:20:12 -0500 Received: from mx1.redhat.com ([209.132.183.28]:46013) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ad2ZU-00035f-Ek for grub-devel@gnu.org; Mon, 07 Mar 2016 16:20:08 -0500 Received: from int-mx11.intmail.prod.int.phx2.redhat.com (int-mx11.intmail.prod.int.phx2.redhat.com [10.5.11.24]) by mx1.redhat.com (Postfix) with ESMTPS id 0E09B72091; Mon, 7 Mar 2016 21:20:08 +0000 (UTC) Received: from redhat.com (ovpn-112-81.phx2.redhat.com [10.3.112.81]) by int-mx11.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id u27LK0Gp003484 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Mon, 7 Mar 2016 16:20:05 -0500 Date: Mon, 7 Mar 2016 16:20:00 -0500 From: Peter Jones To: Andrei Borzenkov Subject: Re: Bugs and tasks for 2.02[~rc1] Message-ID: <20160307211958.GF13163@redhat.com> References: <20160304200641.GC27106@redhat.com> <56DA9AE8.3010006@gmail.com> <20160307190016.GA13163@redhat.com> <56DDE5B0.6080002@gmail.com> <56DDEB3D.4010505@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <56DDEB3D.4010505@gmail.com> User-Agent: Mutt/1.5.24 (2015-08-30) X-Scanned-By: MIMEDefang 2.68 on 10.5.11.24 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.38]); Mon, 07 Mar 2016 21:20:08 +0000 (UTC) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 209.132.183.28 Cc: Matt Fleming , Vladimir 'phcoder' Serbinenko , Colin Watson , The development of GRUB 2 X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: The development of GNU GRUB List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Mar 2016 21:20:14 -0000 On Mon, Mar 07, 2016 at 11:57:33PM +0300, Andrei Borzenkov wrote: > > > How big part of it is related to secure boot? Just > > changing Linux boot protocol doesn't need FSF involvement. Accepting secure > > Patches currently use EFI stub to launch kernel but I think this is done > simply to make code easier. We can continue to use the same load > protocol as before, just add image verification. No, they're doing it because that is the supported entry point for EFI in Linux. We do not want EFI machines using other entry points. It worked out terribly when we used to do this, and we don't want to start again. I've Cc'd Matt Fleming, the upstream kernel EFI maintainer, because I'm sure he's going to agree with me. -- Peter