Hacker News new | ask | show | jobs
by scaladev 1888 days ago
How can Secure Boot help against, say, patched libc?

You need either full disk encryption, or something like dm-verity for that.

1 comments

I misunderstood your post. Of course full disk encryption is vital for security. My point was that without secure boot you can't be sure that software asking for your password is legitimate. Typical setup consists of unencrypted boot partition with Linux kernel which asks for password. You can't be sure that this Linux kernel was not patched, but Secure Boot helps to ensure that.