Re: [RFC] ATA host-protected area (HPA) device mapper?

From: Arjan van de Ven
Date: Sun Jun 11 2006 - 11:47:52 EST



> The simple solution is: you never boot from the hard disk, but from a
> physically write protected device (write protected floppy, non writeable
> CD or CDRW in a non writing CDROM drive, USB thumb drive with a physical
> write protect switch).


that's not totally fool proof either; after all an attacker can adjust
the nvram to change the boot device order.



-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/