Re: [opensuse-factory] what is "Trusted Boot Support" for boot sector/grub ??

On Sun, Jun 05, 2016 at 07:39:34PM -0600, Chris Murphy wrote:

On Sun, Jun 5, 2016 at 2:57 AM, André Verwijs wrote:

...

for the latest tumbleweed snapshot....

what is "Trusted Boot Support" for boot sector/grub ?? what does it do..??

Makes it possible to support measured boot. What happens if the measurement fails is a matter of policy, so if the boot isn't "trusted" doesn't mean it fails to boot.

https://mjg59.dreamwidth.org/39339.html

Thanks for sharing, that's a good read. By the way I also wrote a simple howto in our package to use measure pcr as keys to seal and unseal lucks key file. https://build.opensuse.org/package/view_file/Base:System/trustedgrub2/HOWTO.... Thanks, Michael

-- Chris Murphy -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

-- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org