Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1762073Ab2KAQgJ (ORCPT ); Thu, 1 Nov 2012 12:36:09 -0400 Received: from lxorguk.ukuu.org.uk ([81.2.110.251]:34899 "EHLO lxorguk.ukuu.org.uk" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1762054Ab2KAQgF (ORCPT ); Thu, 1 Nov 2012 12:36:05 -0400 Date: Thu, 1 Nov 2012 16:40:45 +0000 From: Alan Cox To: Matthew Garrett Cc: James Bottomley , Eric Paris , Jiri Kosina , Oliver Neukum , Chris Friesen , Josh Boyer , linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, linux-efi@vger.kernel.org Subject: Re: [RFC] Second attempt at kernel secure boot support Message-ID: <20121101164045.6a9ed161@pyramind.ukuu.org.uk> In-Reply-To: <20121101162901.GE13132@srcf.ucam.org> References: <36538307.gzWq1oO7Kg@linux-lqwf.site> <1351760905.2391.19.camel@dabdike.int.hansenpartnership.com> <1351762703.2391.31.camel@dabdike.int.hansenpartnership.com> <1351763954.2391.37.camel@dabdike.int.hansenpartnership.com> <1351780935.2391.58.camel@dabdike.int.hansenpartnership.com> <20121101144912.GA10269@srcf.ucam.org> <20121101150654.19efe0b5@pyramind.ukuu.org.uk> <20121101162901.GE13132@srcf.ucam.org> X-Mailer: Claws Mail 3.8.1 (GTK+ 2.24.8; x86_64-redhat-linux-gnu) Face: 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 Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1069 Lines: 27 On Thu, 1 Nov 2012 16:29:01 +0000 Matthew Garrett wrote: > On Thu, Nov 01, 2012 at 03:06:54PM +0000, Alan Cox wrote: > > > The entire point of this feature is that it's no longer possible to turn > > > a privileged user exploit into a full system exploit. Gaining admin > > > access on Windows 8 doesn't permit you to install a persistent backdoor, > > > > Really, that would be a first. Do you have a detailed knowledge of > > windows 8 actual security ? > > http://msdn.microsoft.com/en-us/library/windows/desktop/hh848061%28v=vs.85%29.aspx No I said knowledge of not web pages. The Red Hat pages say Linux is very secure, the Apple ones say MacOS is. The point being you don't want to evaluate apparent security by press release of one system versus deep internal knowledge of the other. Alan -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/