secure boot: how to disable this crap?

[Joshua C.]

2012/10/28 Kevin Kofler <kevin.kofler at chello.at>

> Joshua C. wrote:
> > Over the last months there have been many patches to the rawhide-kernel
> > and rawhide-grub2 packages that aim to make those compatible with the M$
> > requirements for secure boot. Those locked down many user space
> > capabilities. However I still haven't seen any single "magic" switch that
> > can disable all this crap at once during compilation. As a result I
> cannot
> > port grub2 and the rawhide kernel to the current f17. I can simply
> > recompile the packages against f17 but all those lockups will still stay
> > in place :-(
> >
> > Can someone point me to this switch (option, parameter, etc) so that I
> can
> > recomile and strip down those packages of all this crap?
>
> AIUI, those lockdowns are supposed to only apply if Restricted ("Secure")
> Boot is supported by and enabled in the BIOS (or rather, the UEFI firmware;
> traditional BIOSes don't have that misfeature).
>
>         Kevin Kofler
>
>
I see but is there a general switch do disable those even if secure boot is
set to enable in the uefi firmware?

Honestly looking into the latest patch applied to the rawhide-kernel, I
cannot see any indication that those lockups occur only if secure boot is
set in the uefi firmware. They just lock out the user space regardless of
what the uefi says...

-- 
--joshua
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20121028/6290db58/attachment.html>