Building your own initial RAMdisk? That's insecure! . Lennart Poettering's latest blog post proposes moving the Linux boot process into a "Brave New Trusted Boot World" of cryptographically signed Unified Kernel Images. Agent Poettering offers a mechanism for tightening up the security of the system startup process on Linux machines, using TPM 2.0 hardware. In brief, what he sees as the problem is that on hardware with Secure Boot enabled, while the boot process up to and including the kernel is signed, the next step, loading the initrd , is not. That's what he wants to fix. . Lennart Poettering proposes moving the Linux boot process into a 'Brave New Trusted Boot World.'. Linux Boot, TPM Enhancements, Trusted Boot Process. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.