Re: secure boot: how to disable this crap?

2012-10-28 Thread Joshua C.
2012/10/28 Matthew Garrett > On Sun, Oct 28, 2012 at 03:04:15AM +0100, Joshua C. wrote: > > > I see but is there a general switch do disable those even if secure boot > is > > set to enable in the uefi firmware? > > No. That's kind of the point. > > > Honestly looking into the latest patch applie

Re: secure boot: how to disable this crap?

2012-10-28 Thread Matthew Garrett
On Sun, Oct 28, 2012 at 03:04:15AM +0100, Joshua C. wrote: > I see but is there a general switch do disable those even if secure boot is > set to enable in the uefi firmware? No. That's kind of the point. > Honestly looking into the latest patch applied to the rawhide-kernel, I > cannot see any

Re: secure boot: how to disable this crap?

2012-10-28 Thread Josh Boyer
On Sat, Oct 27, 2012 at 10:04 PM, Joshua C. wrote: >> AIUI, those lockdowns are supposed to only apply if Restricted ("Secure") >> Boot is supported by and enabled in the BIOS (or rather, the UEFI >> firmware; >> traditional BIOSes don't have that misfeature). Correct. > I see but is there a gen

Re: secure boot: how to disable this crap?

2012-10-27 Thread Chris Murphy
On Oct 27, 2012, at 8:04 PM, Joshua C. wrote: > I see but is there a general switch do disable those even if secure boot is > set to enable in the uefi firmware? If you're going to disable it for linux, you might as well disable it in the firmware. There's little point in having it enabled fo

Re: secure boot: how to disable this crap?

2012-10-27 Thread Joshua C.
2012/10/28 Kevin Kofler > Joshua C. wrote: > > Over the last months there have been many patches to the rawhide-kernel > > and rawhide-grub2 packages that aim to make those compatible with the M$ > > requirements for secure boot. Those locked down many user space > > capabilities. However I still

Re: secure boot: how to disable this crap?

2012-10-27 Thread Kevin Kofler
Joshua C. wrote: > Over the last months there have been many patches to the rawhide-kernel > and rawhide-grub2 packages that aim to make those compatible with the M$ > requirements for secure boot. Those locked down many user space > capabilities. However I still haven't seen any single "magic" swi

secure boot: how to disable this crap?

2012-10-27 Thread Joshua C.
Over the last months there have been many patches to the rawhide-kernel and rawhide-grub2 packages that aim to make those compatible with the M$ requirements for secure boot. Those locked down many user space capabilities. However I still haven't seen any single "magic" switch that can disable all