Re: Linux DRTM on UEFI platforms
From: Matthew Garrett
Date: Tue Jul 05 2022 - 20:21:26 EST
On Wed, Jul 06, 2022 at 09:33:23AM +0930, Brendan Trotter wrote:
> The only correct approach is "efi-stub -> head_64.S -> kernel's own
> secure init"; where (on UEFI systems) neither GRUB nor Trenchboot has
> a valid reason to exist and should never be installed.
Surely the entire point of DRTM is that we *don't* have to trust the
bootloader?