The purpose of SecureBoot is to prevent untrusted modification of
firmware, thus as per SecureBoot specs no unsigned code should be called
before ExitBootServices() has been called. Thus one should be targetting
as to how to bypass that when booted in secure boot mode. For example
the King's & Queen's Gambits vulnerabilities as presented in
http://www.mitre.org/sites/default/files/publications/14-2221-extreme-
escalation-presentation.pdf

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1401532

Title:
  GRUB's Secure Boot implementation loads unsigned kernel without
  warning

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2-signed/+bug/1401532/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to