LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Closed Thread
  Search this Thread
Old 07-31-2020, 07:30 PM   #16
thirdm
Member
 
Registered: May 2013
Location: Massachusetts
Distribution: Slackware, OpenBSD, NetBSD
Posts: 191

Rep: Reputation: Disabled

Quote:
Originally Posted by allend View Post
I totally agree that this issue is being overblown.
It doesn't affect me but there's more to security these days then giving up root access. There are systems with guarantees even if you have physical access and root access and this breaks those guarantees.

Sending out patches not fully tested is never good though.
 
Old 07-31-2020, 10:31 PM   #17
Didier Spaier
LQ Addict
 
Registered: Nov 2008
Location: Paris, France
Distribution: Slint64-14.2.1.2 on Lenovo Thinkpad W520
Posts: 9,431

Rep: Reputation: Disabled
Quote:
Originally Posted by gus3 View Post
Right now, I'm so glad I blew away the EFI partition system and went back to the "legacy BIOS" boot chain.

EFI was just another Microsoft "innovation" waiting to be exploited.
Only Secure Boot, which is an optional feature of the UEFI specification was initially proposed by Microsoft. The PE/COFF format of EFI images is described in a Microsoft document, but this document is public and the format is unambiguously specified, which is a very good thing. It is also good that the file system of the ESP be FAT (also, initially from Microsoft) as it is not only well specified and stable but also very simple. The advantages and disadvantages of EFI over BIOS are stated in https://en.wikipedia.org/wiki/Unifie...ware_Interface, the details are in https://uefi.org/sites/default/files..._8_A_Feb14.pdf.

FYI the new Slint installer will have an "auto" aka "guided" mode helping to share a drive with another (already installed) system, but only if the installer booted in EFI mode and the drive has a GPT, as this is way safer than BIOS and a DOS partition table in this use case, and allows to make both systems truly independent of each other.

Anyway in a few years you won't find motherboards with an hybrid firmware, so better be prepared

Last edited by Didier Spaier; 08-01-2020 at 02:23 AM.
 
3 members found this post helpful.
Old 08-01-2020, 01:20 PM   #18
elcore
Member
 
Registered: Sep 2014
Distribution: Slackware
Posts: 677

Rep: Reputation: Disabled
Quote:
Originally Posted by upnort View Post
Not your problem. I wasn't citing you or speaking to you. I was being generic because so many Slackware forum threads these days degenerate.
Let me get this right, you have issues with some unspecified threads where quality of discussion does not meet your expectations?
Meanwhile, creating a new thread warning Slackers that your Debian system may have crashed is totally fine in your book.
Not only that, but in the title you make it look like Slackware had shipped a bad patch, and in the post it's just a warning that Slackware may or may not ship a bad patch in the future.

What if windows users came here to post clickbait titles, do you think that would help regenerate the forum?
It'd help with keeping the forum on-topic, right?

I'm not going to derail any further, just wanted to say you did actually quote my post there so I assumed you're trying to make it my problem.
 
1 members found this post helpful.
Old 08-01-2020, 01:45 PM   #19
LuckyCyborg
Member
 
Registered: Mar 2010
Posts: 676

Rep: Reputation: 451Reputation: 451Reputation: 451Reputation: 451Reputation: 451
Slackware uses signed binaries[1] for booting?

Last I checked, it doesn't, then this shocking security flaw on Grub is not our problem. It does not make our UEFI boot more insecure as already it is.




[1] like in: kernels signed with developer certificates issued by Microsoft, Inc. which should be the only things accepted for execution by bootloader.

Last edited by LuckyCyborg; 08-01-2020 at 01:51 PM.
 
1 members found this post helpful.
Old 08-01-2020, 02:28 PM   #20
upnort
Senior Member
 
Registered: Oct 2014
Distribution: Slackware, Proxmox, Debian, CentOS
Posts: 1,632

Original Poster
Rep: Reputation: 969Reputation: 969Reputation: 969Reputation: 969Reputation: 969Reputation: 969Reputation: 969Reputation: 969
Quote:
I'm not going to derail any further, just wanted to say you did actually quote my post there so I assumed you're trying to make it my problem.
Ah, no. Really, my off-hand statement was generic, directed to nobody in particular but everybody generically. I only wanted to warn Slackers and Pat of the potential breakage. A simple public service announcement (PSA). I wrote my off-hand generic statement because I did not want the thread to devolve, but you seem well on the way of doing just that.
 
Old 08-01-2020, 03:44 PM   #21
Richard Cranium
Senior Member
 
Registered: Apr 2009
Location: Carrollton, Texas
Distribution: Slackware64 14.2
Posts: 3,713

Rep: Reputation: 2059Reputation: 2059Reputation: 2059Reputation: 2059Reputation: 2059Reputation: 2059Reputation: 2059Reputation: 2059Reputation: 2059Reputation: 2059Reputation: 2059
Quote:
Originally Posted by elcore View Post
Let me get this right, you have issues with some unspecified threads where quality of discussion does not meet your expectations?
Meanwhile, creating a new thread warning Slackers that your Debian system may have crashed is totally fine in your book.
Not only that, but in the title you make it look like Slackware had shipped a bad patch, and in the post it's just a warning that Slackware may or may not ship a bad patch in the future.

What if windows users came here to post clickbait titles, do you think that would help regenerate the forum?
It'd help with keeping the forum on-topic, right?

I'm not going to derail any further, just wanted to say you did actually quote my post there so I assumed you're trying to make it my problem.
Are you a native English speaker? Or simply someone with poor reading skills?
 
Old 08-01-2020, 04:09 PM   #22
Didier Spaier
LQ Addict
 
Registered: Nov 2008
Location: Paris, France
Distribution: Slint64-14.2.1.2 on Lenovo Thinkpad W520
Posts: 9,431

Rep: Reputation: Disabled
Rule of thumb: when exchanging pleasantries begins, it's time to let the thread rest in peace.

Last edited by Didier Spaier; 08-01-2020 at 05:25 PM.
 
2 members found this post helpful.
Old 08-01-2020, 04:31 PM   #23
elcore
Member
 
Registered: Sep 2014
Distribution: Slackware
Posts: 677

Rep: Reputation: Disabled
Quote:
Originally Posted by Richard Cranium View Post
Are you a native English speaker? Or simply someone with poor reading skills?
No, how is that even relevant to the title of the thread?
Title is clickbait, it does not say whether or not Slackware has actually shipped the "bad-grub-security-patch"
Just saying threads about Debian breakage should go into Debian sub, if quality of the forum in general is a main concern here.
If not, then why do we have different subforums anyway? We could all just post bugs in general forum.
 
Old 08-01-2020, 05:03 PM   #24
upnort
Senior Member
 
Registered: Oct 2014
Distribution: Slackware, Proxmox, Debian, CentOS
Posts: 1,632

Original Poster
Rep: Reputation: 969Reputation: 969Reputation: 969Reputation: 969Reputation: 969Reputation: 969Reputation: 969Reputation: 969
Mods, please lock this thread. Thank you.
 
Old 08-01-2020, 07:41 PM   #25
michaelk
Moderator
 
Registered: Aug 2002
Posts: 20,221

Rep: Reputation: 3459Reputation: 3459Reputation: 3459Reputation: 3459Reputation: 3459Reputation: 3459Reputation: 3459Reputation: 3459Reputation: 3459Reputation: 3459Reputation: 3459
Thread closed at OPs request.
 
  


Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
PSA: Flatpak is a security nightmare YesItsMe Linux - Security 1 10-18-2018 07:20 PM
Infinite Grub Loop: GRUB GRUB GRUB GRUB GRUB GRUB GRUB GRUB GRUB GRUB... beeblequix MEPIS 2 11-02-2013 10:56 PM
LXer: PSA Peugeot CitroŽn Chooses SUSE Linux Enterprise Desktop from Novell LXer Syndicated Linux News 0 01-31-2007 02:21 PM
Configuring my older Rio mp3 player, a Nike psa Ed-MtnBiker Fedora 0 01-16-2005 11:31 PM
Nike PSA MP3 player iainvt Linux - Software 1 07-14-2004 09:08 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 09:03 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration