[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#885152: ITP: intel-me-cleaner -- Tool for partial deblobbing of Intel ME/TXE firmware images



Hi!

Am 16.02.2018 um 12:55 schrieb Bálint Réczey:
> Hi Matthias,
> 
> On Dec 25, 2017 06:46, "Bálint Réczey" <balint@balintreczey.hu> wrote:
> 
> Hi Matthias,
> 
> Would you like to upload the PureOS package with small changes to Debian?
> I remember we talked about you possibly packaging it for Debian but I did
> not
> know it was already available for PureOS in the repo.

Sorry for the much delayed reply, I actually wanted to write a message
immediately after I saw the ITP report, but that task somehow got lost...

> If you don't plan uploading the version from PureOS I plan uploading mine
> which is a bit more recent.

I think uploading the older version when a more recent one is available
is just silly ;-)
So, go ahead!
It would be nice though if we could maybe collaborate easily on the
packaging, so maybe putting it under team-maintenance or into
collab-main would be nice :-)

Cheers,
    Matthias


> 
> 2017-12-25 0:18 GMT+01:00 Jonas Smedegaard <jonas@jones.dk>:
>> Quoting Balint Reczey (2017-12-25 00:02:20)
>>> Package: wnpp
>>> Owner: Balint Reczey <rbalint@ubuntu.com>
>>> Severity: wishlist
>>> X-Debbugs-CC: debian-devel@lists.debian.org
>>>
>>> * Package name    : intel-me-cleaner
>>>   Version         : 1.0+git20171022.g2ff65c1
>>>   Upstream Author : Nicola Corna <nicola@corna.info>
>>> * URL             : https://github.com/corna/me_cleaner
>>> * License         : GPL-3.0+
>>>   Programming Lang: Python
>>>   Description     : Tool for partial deblobbing of Intel ME/TXE firmware
> images
>>>
>>> The Intel�� Management Engine (ME) is a microcontroller embedded in
>>> most Intel chipsets manufactured since 2006 that runs independently
>>> from the main CPU.
>>>
>>> It is not removable from the system and it runs a signed proprietary
>>> firmware, with full network and memory access, which poses a serious
>>> security threat. Even when disabled from the BIOS settings, Intel ME
>>> is active: the only way to be sure it is disabled is to remove its
>>> firmware from the flash chip.
>>>
>>> This package allows removing parts of the signed proprietary firmware
>>> effectively disabling the Management Engine.
>>
>> You might benefit from the .deb package done for PureOS:
>> https://repo.pureos.net/pureos/pool/main/m/me-cleaner/
> 
> Thanks Jonas!
> 
> Cheers,
> Balint
> 
>>
>>
>>  - Jonas
>>
>> --
>>  * Jonas Smedegaard - idealist & Internet-arkitekt
>>  * Tlf.: +45 40843136  Website: http://dr.jones.dk/
>>
>>  [x] quote me freely  [ ] ask before reusing  [ ] keep private
> 

Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: