![](https://seccdn.libravatar.org/avatar/b6a77479a0d29007bf9252b8b59fb010.jpg?s=120&d=mm&r=g)
29 Apr
2021
29 Apr
'21
10:43
Dne 29. 04. 21 v 11:55 Andrei Borzenkov napsal(a):
That's not my point. My point is that there is nothing secret stored under /boot. If it is a separate partition, it may be left unencrypted, avoiding the need to give a password to the boot loader. Currently neither grub.cfg nor initrd are verified. Which means it is
On Wed, Apr 28, 2021 at 8:47 PM Petr Tesařík <ptesarik@suse.cz> wrote: possible to install modified initrd which takes over after you unlocked root.
If anyone can write to your disk, I think it's game over one way or another. But you can make it slightly harder for them, sure. Petr T