LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 09-19-2020, 07:32 PM   #31
enorbet
Senior Member
 
Registered: Jun 2003
Location: Virginia
Distribution: Slackware = Main OpSys
Posts: 4,811

Rep: Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447

Quote:
Originally Posted by average_user View Post
I don't know, ask Microsoft and Intel.
I can't know if you were serious but it should be obvious they can't answer for me. What is far less obvious is what good Secure Boot can possibly offer Slackware or Linux as a whole. Since Microsoft and Intel don't emphasize Linux (and who really can blame them?) it's unlikely any meaningful answer will be forthcoming. In the meantime I rely on "If it ain't broke, don't 'fix' it".

On the flip side we have entered an era where firmware is just software and can be attacked by malware underneath any OpSys. How much damage that can cause is largely OpSys dependent and is still to play out. How effective Secure Boot is in defense against such attacks, especially for Linux, is an ongoing battle.

That's why I ask the cost/benefit question.

Last edited by enorbet; 09-19-2020 at 07:33 PM.
 
Old 09-20-2020, 05:53 AM   #32
average_user
Member
 
Registered: Dec 2010
Location: Warsaw, Poland
Distribution: Slackware
Posts: 560

Original Poster
Rep: Reputation: 220Reputation: 220Reputation: 220
Quote:
Originally Posted by enorbet View Post
I can't know if you were serious but it should be obvious they can't answer for me.
They can't answer for you so you decided to ask some random dudes on the internet. Fine.

Quote:
Originally Posted by enorbet View Post
Since Microsoft and Intel don't emphasize Linux (and who really can blame them?)
I don't know what do you expect from them but Intel contributes a lot of code to Linux, see https://git.kernel.org/pub/scm/linux...ee/MAINTAINERS or LKML.

Quote:
Originally Posted by enorbet View Post
In the meantime I rely on "If it ain't broke, don't 'fix' it".
I want to make it work at all, not fix it. According to https://www.howtogeek.com/116569/htg...ans-for-linux:

Quote:

For Windows 8 PCs, manufacturers had to give you a way to turn Secure
Boot off. Microsoft required PC manufacturers to put a Secure Boot
kill switch in users’ hands.

For Windows 10 PCs, this is no longer mandatory. PC manufacturers can
choose to enable Secure Boot and not give users a way to turn it
off. However, we’re not actually aware of any PC manufacturers that do
this.
And someone in this thread has already come across a computer on which Secure Boot cannot be disabled https://www.linuxquestions.org/quest...7/#post6165463

Quote:
Originally Posted by enorbet View Post
On the flip side we have entered an era where firmware is just software and can be attacked by malware underneath any OpSys. How much damage that can cause is largely OpSys dependent and is still to play out. How effective Secure Boot is in defense against such attacks, especially for Linux, is an ongoing battle.

That's why I ask the cost/benefit question.
https://support.microsoft.com/en-us/contactus
https://www.intel.com/content/www/us...t-support.html
https://www.asus.com/us/support/callus
 
Old 09-21-2020, 06:16 AM   #33
timsoft
Member
 
Registered: Oct 2004
Location: scotland
Distribution: slackware 15.0 64bit, 14.2 64 and 32bit and arm, ubuntu and rasbian
Posts: 495

Rep: Reputation: 144Reputation: 144
I thought I had a similar issue to ZhaoLin1457 with not being able to disable secure boot on a laptop. I emailed the manufacturer, and they said that you needed to first create a bios password. Having done this, and restarting, the bios option to disable secureboot appeared!. After disabling it, i could clear the bios password I had temporarily added, and hey-presto! secure-boot disabled, and I could set up dual boot with slackware without having to go through all the hoops described.
 
2 members found this post helpful.
Old 09-21-2020, 09:08 AM   #34
average_user
Member
 
Registered: Dec 2010
Location: Warsaw, Poland
Distribution: Slackware
Posts: 560

Original Poster
Rep: Reputation: 220Reputation: 220Reputation: 220
What laptop model do you have?
 
Old 09-23-2020, 12:47 PM   #35
slac-in-the-box
Member
 
Registered: Mar 2010
Location: oregon
Distribution: slackware64-15.0 / slarm64-current
Posts: 782
Blog Entries: 1

Rep: Reputation: 432Reputation: 432Reputation: 432Reputation: 432Reputation: 432
Quote:
Originally Posted by enorbet View Post
Again, what does Secure Boot actually bring to the table as a Benefit and at what Cost? That is by definition, The Bottom Line - Profit or Loss?.
I own and provision x86_64 and arm64 devices, both which have secure-boot (mainline u-boot can store secure-boot-keys); linux kernel can uefi boot with efi_boot_stub configured... so one way to configure booting that works everywhere is handy, though not profitable, per se.

I fixed an apple guy's imac's time machine's mess: I put my portable ssd with slackware64 on it, (which has /boot/efi/EFI/BOOT/BOOTX64.efi), and held the option key during startup, and behold, the portable ssd was available, and I was able to run his imac on my ssd, then mount his imac's internal drive, and use rsync to merge all the copies of copies inside itself that his time machine setup had created... he was really grateful and gave me some bucks (profit). If he had had a secure-boot computer, it would have been more challenging, as this thread discloses, and I would have missed out.

Having a portable slackware installation that can boot a customer's secure-boot device leads to profit! Even though, from a security point of view, secure-boot might not have helped slackware or linux--in fact it created a hindrance by needing more work to make it work--nevertheless, having a secure-boot equipped slackware allows access to those devices that would otherwise be hindered, and that access can be profitable!
 
1 members found this post helpful.
Old 09-23-2020, 03:37 PM   #36
chrisVV
Member
 
Registered: Aug 2010
Posts: 548

Rep: Reputation: 370Reputation: 370Reputation: 370Reputation: 370
Quote:
Originally Posted by enorbet View Post
I can't know if you were serious but it should be obvious they can't answer for me. What is far less obvious is what good Secure Boot can possibly offer Slackware or Linux as a whole. Since Microsoft and Intel don't emphasize Linux (and who really can blame them?) it's unlikely any meaningful answer will be forthcoming. In the meantime I rely on "If it ain't broke, don't 'fix' it".

On the flip side we have entered an era where firmware is just software and can be attacked by malware underneath any OpSys. How much damage that can cause is largely OpSys dependent and is still to play out. How effective Secure Boot is in defense against such attacks, especially for Linux, is an ongoing battle.

That's why I ask the cost/benefit question.
The question originally posed was in the title: "Start Slackware installer without disabling UEFI Secure Boot first?", positing also subsequently the possibility of having a computer on which it cannot be disabled (which is indeed possible with Windows 10 onwards).

If you cannot answer that question why not be silent rather than trying to take the thread over for your own purposes. Stating your highly predictable views on a different question, namely whether secure boot is a Microsoft conspiracy ("Armed Robbery" as you put it) or has an adequate cost/benefit ratio, might be acceptable if done once, but to keep going on and on I don't think is.

It is a shame when someone tries to turn a technical discussion into yet another twitter-style righteousness war.

Last edited by chrisVV; 09-23-2020 at 03:43 PM.
 
1 members found this post helpful.
Old 09-23-2020, 06:04 PM   #37
enorbet
Senior Member
 
Registered: Jun 2003
Location: Virginia
Distribution: Slackware = Main OpSys
Posts: 4,811

Rep: Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447Reputation: 4447
Thanks slac-in-the-box. I concur about portable Slackware installs as a great investment. However I still get the strong impression that Secure Boot is like offering a new car with the salient feature that it requires two sets of keys to start it.
 
Old 09-23-2020, 06:05 PM   #38
Regnad Kcin
Member
 
Registered: Jan 2014
Location: Beijing
Distribution: Slackware 64 -current .
Posts: 663

Rep: Reputation: 460Reputation: 460Reputation: 460Reputation: 460Reputation: 460
@ZhaoLin

Quote:
What laptop model do you have?
__________________
Arkadiusz Drabczyk
http://drabczyk.org/
I also would like to know so that I can avoid
this brand of laptop and circumvent their sordid plot of entrapment.
谢谢您的配合.

Last edited by Regnad Kcin; 09-23-2020 at 06:08 PM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] BIOS - disabling Secure Boot when UEFI Boot Mode is active abga Slackware 2 02-28-2018 05:46 PM
If you disable Secure Boot, is UEFI still more secure than BIOS boot? Ulysses_ Linux - Security 4 05-30-2017 10:08 AM
Mobo only supports uefi boot - how do I boot off a non-uefi cd? Ulysses_ Linux - Hardware 3 02-25-2016 08:06 PM
disabling secure boot when secure boot is not an option in BIOS? chexmix Slackware 10 05-28-2015 06:13 PM
LXer: Microsoft Says No to Disabling UEFI Secure Boot on ARM LXer Syndicated Linux News 0 01-16-2012 06:40 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 07:28 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration