*countable infinities only

Peter Jones pjones at redhat.com
Mon Jun 18 13:36:41 UTC 2012


On 06/18/2012 09:26 AM, Seth Johnson wrote:
> On Mon, Jun 18, 2012 at 8:59 AM, Matthew Garrett <mjg59 at srcf.ucam.org> wrote:
>> On Mon, Jun 18, 2012 at 08:45:07AM -0400, Seth Johnson wrote:
>>> On Mon, Jun 18, 2012 at 7:43 AM, Matthew Garrett <mjg59 at srcf.ucam.org> wrote:
>>>> The features you wanted in a free software UEFI are present in existing
>>>> UEFI implementations, so I'm not sure what you're asking for.
>>>
>>> No need for a shim.  Not having to ask permission.  It's my
>>> understanding that you are buying a signed key so the installation of
>>> Fedora is not scary.
>>
>> You're still not making it clear what you want. Hardware without secure
>> boot? Hardware with secure boot but a different default policy? Hardware
>> with free firmware that may or may not have secure boot enabled by
>> default?
>
>
> Write a new UEFI.  No need for a shim.  Peter stated what the free
> software UEFI on its own hardware should support: "disable Secure Boot
> or use your own chain of trust."

This is what current x86 UEFI implementations give us.

> Plus, because you appear to be motivated to buy a shim for this reason, write
> the UEFI so it does not make it scary to install in any configuration you use
> as the empowered owner of the device.

Buy a what now? shim is a piece of software Matthew has been writing. We're
not talking about buying any software.

-- 
         Peter


More information about the devel mailing list