From mboxrd@z Thu Jan 1 00:00:00 1970 From: Matthew Garrett Subject: Re: [RFC] Second attempt at kernel secure boot support Date: Sat, 3 Nov 2012 01:43:32 +0000 Message-ID: <20121103014332.GA20065@srcf.ucam.org> References: <20121101212843.GA20309@srcf.ucam.org> <20121101213751.377ebaa8@pyramind.ukuu.org.uk> <20121101213452.GA20564@srcf.ucam.org> <20121101215817.79e50ec2@pyramind.ukuu.org.uk> <20121101215752.GA21154@srcf.ucam.org> <87625ogzje.fsf@xmission.com> <20121102140057.GA4668@srcf.ucam.org> <87liejacix.fsf@xmission.com> <20121103002033.GA18691@srcf.ucam.org> <87sj8rwm0p.fsf@xmission.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Content-Disposition: inline In-Reply-To: <87sj8rwm0p.fsf-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org> Sender: linux-efi-owner-u79uwXL29TY76Z2rM5mHXA@public.gmane.org To: "Eric W. Biederman" Cc: Alan Cox , James Bottomley , Eric Paris , Jiri Kosina , Oliver Neukum , Chris Friesen , Josh Boyer , linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, linux-security-module-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, linux-efi-u79uwXL29TY76Z2rM5mHXA@public.gmane.org List-Id: linux-efi@vger.kernel.org On Fri, Nov 02, 2012 at 05:47:02PM -0700, Eric W. Biederman wrote: > No reason to? How can I configure an off the shelf system originally > sold with windows 8 installed to boot in UEFI secure boot mode using > shim without trusting Microsoft's key? Delete the installed keys, install your choice of keys, make sure your bootloader is signed with a key you trust. You're guaranteed to be able to do this on any Windows 8 certified hardware. -- Matthew Garrett | mjg59-1xO5oi07KQx4cg9Nei1l7Q@public.gmane.org