Re: [GIT PULL] Load keys from signed PE binaries

Matthew Garrett
2013-02-28T20:31:46Z

On Thu, Feb 28, 2013 at 09:23:45PM +0100, Florian Weimer wrote:
> * Matthew Garrett:
> > grub's running before ExitBootServices(), because otherwise it has no
> > way to actually read anything off disk. Or draw to the screen.
>
> Sorry, if Linux can read from the disk after ExitBootServices(), so
> can a boot loader. Actually, we could boot Linux directly, with an
> initrd which contains a boot selector, and use kexec if the chosen
> kernel doesn't match the initial one.

"A bootloader" might be able to. grub can't.

--
Matthew Garrett | mjg59@srcf.ucam.org