From mboxrd@z Thu Jan 1 00:00:00 1970 From: ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org (Eric W. Biederman) Subject: Re: [RFC] Second attempt at kernel secure boot support Date: Mon, 05 Nov 2012 11:16:12 -0800 Message-ID: <87sj8nc137.fsf@xmission.com> References: <20121103002244.GC18691@srcf.ucam.org> <1351944236.2417.7.camel@dabdike.int.hansenpartnership.com> <20121103134630.GA28166@srcf.ucam.org> <1351983400.2417.21.camel@dabdike.int.hansenpartnership.com> <20121104042802.GA11295@srcf.ucam.org> <1352020487.2427.5.camel@dabdike.int.hansenpartnership.com> <20121104135251.GA17894@srcf.ucam.org> <87d2zsmv8r.fsf@xmission.com> <509766DB.9090906@zytor.com> <87625kh5r2.fsf@xmission.com> <20121105123858.GB4374@srcf.ucam.org> Mime-Version: 1.0 Content-Type: text/plain Return-path: In-Reply-To: <20121105123858.GB4374-1xO5oi07KQx4cg9Nei1l7Q@public.gmane.org> (Matthew Garrett's message of "Mon, 5 Nov 2012 12:38:58 +0000") Sender: linux-efi-owner-u79uwXL29TY76Z2rM5mHXA@public.gmane.org To: Matthew Garrett Cc: "H. Peter Anvin" , James Bottomley , Pavel Machek , Chris Friesen , Eric Paris , Jiri Kosina , Oliver Neukum , Alan Cox , Josh Boyer , linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, linux-security-module-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, linux-efi-u79uwXL29TY76Z2rM5mHXA@public.gmane.org List-Id: linux-efi@vger.kernel.org Matthew Garrett writes: > On Sun, Nov 04, 2012 at 11:24:17PM -0800, Eric W. Biederman wrote: >> "H. Peter Anvin" writes: >> > >> > That is a hugely different thing from needing a console. >> >> Not at all. >> >> In the general case user intereaction is required to tell the system to >> boot off of your choosen boot media instead of the local hard drive. > > No, in the general case the system will do that once it fails to find a > bootable OS on the drive. In the general case there will be a bootable OS on the drive. Eric