Re: [GIT PULL] Kernel lockdown for secure boot
From: David Howells
Date: Tue Apr 03 2018 - 13:16:15 EST
Andy Lutomirski <luto@xxxxxxxxxx> wrote:
> > A kernel that allows users arbitrary access to ring 0 is just an
> > overfeatured bootloader. Why would you want secure boot in that case?
>
> To get a chain of trust.
You don't have a chain of trust that you can trust in that case.
David