Help answer threads with 0 replies.
Go Back > Forums > Linux Forums > Linux - News > Syndicated Linux News
User Name
Syndicated Linux News This forum is for the discussion of Syndicated Linux News stories.


  Search this Thread
Old 12-04-2013, 12:30 PM   #1
LXer NewsBot
Registered: Dec 2005
Posts: 99,756

Rep: Reputation: 102Reputation: 102
LXer: Subverting security with kexec (Defeating 'secure' boot)

Published at LXer:

But that's not the most interesting way to use kexec. If you can load arbitrary code into the kernel, you can load anything. Including, say, the Windows kernel. ReactOS provides a bootloader that's able to boot the Windows 2003 kernel, and it shouldn't be too difficult for a sufficiently enterprising individual to work out how to get Windows 8 booting. Things are a little trickier on UEFI - you need to tell the firmware which virtual?physical map to use, and you can only do it once. If Linux has already done that, it's going to be difficult to set up a different map for Windows. Thankfully, there's an easy workaround. Just boot with the "noefi" kernel argument and the kernel will skip UEFI setup, letting you set up your own map.Why would you want to do this? The most obvious reason is avoiding Secure Boot restrictions



Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: SUSE working on using kexec, hibernation on secure boot LXer Syndicated Linux News 0 07-03-2013 04:11 AM
LXer: The H Roundup - Firefox 16, security holes and Secure Boot plans LXer Syndicated Linux News 0 10-13-2012 06:10 PM
LXer: Linux Security Slides: Secure Boot, Crypto, AppArmor LXer Syndicated Linux News 0 09-16-2012 08:21 AM
[SOLVED] defeating fuskering and general web security question jamesj629 Linux - Security 7 05-29-2012 03:58 AM
Users subverting security on purpose, Kerberos the only answer? frndrfoe Linux - Security 12 05-14-2010 10:24 AM > Forums > Linux Forums > Linux - News > Syndicated Linux News

All times are GMT -5. The time now is 04:29 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration