Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #262163
| From | Max Nikulin <manikulin@gmail.com> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Debian live boot corrupting secure boot |
| Date | 2023-10-04 17:20 +0200 |
| Message-ID | <HlbPj-dvaF-7@gated-at.bofh.it> (permalink) |
| References | <HiVOF-c6mD-1@gated-at.bofh.it> <HjcFP-cgUN-3@gated-at.bofh.it> <HjIFH-cAxc-1@gated-at.bofh.it> <Hkuhj-d4vY-3@gated-at.bofh.it> <HkvZM-d5Cl-9@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On 03/10/2023 01:34, Valerio Vanni wrote: > Il 02/10/2023 18:45, Max Nikulin ha scritto: >>> But neither Asus (bios from start of September) nor Microsoft >>> (Windows 11) do that blacklisting. >> >> Do you mean Windows install on hard drive or Windows install image? should be "installed"---------^ > > Machine comes with Windows 10 pre installed, and then it's updated from > Windows update. Then I installed Windows 11 with upgrade assistant. > So far, no blacklist of old Clonezilla. > > Do you mean that installing Windows 10 or 11 from scratch could behave > differently? I am curious if just booting a recent media published by Microsoft (not install, just booting till first dialog) may change secure boot keys. If I have got you right, Windows with all updates installed still allows to boot old Clonezilla. I just have spotted in the news https://security-tracker.debian.org/tracker/CVE-2023-4692 "Crafted file system images can cause heap-based buffer overflow and may allow arbitrary code execution and secure boot bypass" and a related link https://github.com/rhboot/shim/blob/main/SBAT.md Secure Boot Advanced Targeting >> If firmware has the "EFI shell" option then you may try "bcfg boot >> dump -v". Unsure if it is possible to redirect output to a file. > > I'll try. Is there nothing inside Linux efi tools? Sorry, your question is unclear for me. I was trying to suggest a way to inspect UEFI boot variables without disturbing its state. If Linux images may do something with secure boot keys then I see the following alternatives: - Firmware may have EFI shell boot option included - Perhaps there are some tools for Windows
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Re: Debian live boot corrupting secure boot Valerio Vanni <valerio.vanni@inwind.it> - 2023-09-28 11:50 +0200
Re: Debian live boot corrupting secure boot Max Nikulin <manikulin@gmail.com> - 2023-09-29 05:50 +0200
Re: Debian live boot corrupting secure boot Valerio Vanni <valerio.vanni@inwind.it> - 2023-09-30 16:00 +0200
Re: Debian live boot corrupting secure boot Max Nikulin <manikulin@gmail.com> - 2023-10-02 18:50 +0200
Re: Debian live boot corrupting secure boot Valerio Vanni <valerio.vanni@inwind.it> - 2023-10-02 20:40 +0200
Re: Debian live boot corrupting secure boot Max Nikulin <manikulin@gmail.com> - 2023-10-04 17:20 +0200
Re: Debian live boot corrupting secure boot Valerio Vanni <valerio.vanni@inwind.it> - 2023-10-04 23:10 +0200
Re: Debian live boot corrupting secure boot Max Nikulin <manikulin@gmail.com> - 2023-10-05 17:30 +0200
Re: Debian live boot corrupting secure boot Valerio Vanni <valerio.vanni@inwind.it> - 2023-10-11 03:50 +0200
Re: Debian live boot corrupting secure boot Max Nikulin <manikulin@gmail.com> - 2023-10-11 04:20 +0200
Re: Debian live boot corrupting secure boot Valerio Vanni <valerio.vanni@inwind.it> - 2023-10-11 17:10 +0200
csiph-web