Re: Kdump with signed images

Matthew Garrett
2012-10-23T16:31:38Z

On Tue, Oct 23, 2012 at 09:19:27AM -0700, Eric W. Biederman wrote:
> No. UEFI secure boot has absolutely nothing todo with this.
>
> UEFI secure boot is about not being able to hijack the code EFI runs
> directly. Full stop.

No. It's about ensuring that no untrusted code can be run before any OS
kernel, which means that no untrusted code can run *in* any OS kernel.

--
Matthew Garrett | mjg59@srcf.ucam.org