Re: TPM support status ?

[Vladimir 'phcoder' Serbinenko]

On Wed, Aug 19, 2009 at 10:33 PM, Michael Gorven<address@hidden> wrote:
> On Wed, Aug 19, 2009 at 10:27:59PM +0200, Vladimir 'phcoder' Serbinenko
> wrote:
>>>>
>>>> Since we're going to say no anyway, there's no reason to do it later.
>>>>  The
>>>> longer we wait the stronger they'll be, and the more difficult for us to
>>>> reject their unreasonable demands.
>>>
>>> Because there are valid use cases that aren't about restricting the
>>> owner's
>>> freedom.
>>
>> Yes but the cost is too high. And few people who really need high
>> security can afford coreboot motherboard.
>
> Your coreboot solution isn't really feasible. The flashed BIOS would contain
> a checksum of the bootloader, which means that you can't change the
> bootloader once the BIOS is flashed. Since the bootloader contains a
> checksum of the kernel, you can't change the kernel either.
>
Signatures.
> -- http://michael.gorven.za.net/
> PGP Key ID 6612FE85
> S/MIME Key ID AAF09E0E
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
>
> iQIcBAEBAgAGBQJKjGGgAAoJEIOxIz1l+OmhbikP/RhE5ToVXuBjPxolIbTQVOVM
> 5SbmeCDA8Uu6H0eB4VoISxjJZ5hySObOMuDRjGua2ABfqxfxE8+yQARzbtaBq6tn
> COPWFoc8hMlcq1JptwsM16R+Qe2inM0Lp/Zew6npLVRWHv1ouQUsiRDp3QiWFVwQ
> ao+U+WfG532mDMgDlyPRamflsBxtzmg+Eb0v26OBAzh6T+k5bBAWUmbFo+iKfhp8
> pnb1j0YUxBxuOHsfQBlDytAwRzNoB4u7MP86LFwjoilo+xaCIw/7wLwq8GRfASEX
> gspgrL0vKUErxHGAYSLNkOW/DfUj82GTKO6NXEiqA7b9jMCIdNiz7CanbZQun+qK
> EICT1mB8FmWsqYjJJI+I5f1K12TQJGy/VWAejs9M/JUZA1dCPSF1q0jxtNEOluOO
> O+4+mJ8zzzt22A+p9RbANR34ix/5zG4z4T9erBqt6/+36b8FYNTth7z6S8qksW4V
> rzS76UMhSydNItFfAEgkywWI1TDrGxFcynY9vncdFiOBKFf/vIFbzJdYA1FRL5PT
> j5+0pZ8WbqokjqeLNOXYSOt/kMSRFuA1goL+io3aBMNajire55j+Ff5rKZ1PmamJ
> 8xArEgEMvoLX09FamxQ0BCcB1XPNDBzZ4sby+uTORic+h7YkKMiAkK8Rv78nOHmc
> f3Y/7dZtLqEUSEF9Eq6L
> =T4Gi
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Grub-devel mailing list
> address@hidden
> http://lists.gnu.org/mailman/listinfo/grub-devel
>
>



-- 
Regards
Vladimir 'phcoder' Serbinenko

Personal git repository: http://repo.or.cz/w/grub2/phcoder.git