[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: installation-guide: secure boot vs. boothole



Hi Holger! Happy New Year!

On Sun, Dec 26, 2021 at 02:50:32PM +0100, Holger Wansing wrote:
>
>on the german l10n mailinglist a topic came up regarding the 'secure boot'
>chapter in the installation-guide:
>https://d-i.debian.org/manual/en.amd64/ch03s06.html#secure-boot
>
>
>It was stated, that the manual declares Secure Boot as an unproblematic
>function. And this in an unauthorized way, when looking at the BootHole 
>security issues.
>
>
>What do you think?
>Should we mention these security issues (or the basic background behind all
>this) in the guide? We may add a link to 
>https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot/
>as an overview page for this topic.
>
>Or do we ignore this - saying, that all software could have it's hidden
>security holes and therefore there is no need to point out this explicitly
>for the Secure Boot function?

I personally don't think it's worth highlighting here specifically, no.

-- 
Steve McIntyre, Cambridge, UK.                                steve@einval.com
Can't keep my eyes from the circling sky,
Tongue-tied & twisted, Just an earth-bound misfit, I...


Reply to: