vbatts/grub
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity
No description
8783 commits 7 branches 0 tags 143 MiB
C 90%
Assembly 4.3%
Shell 1.5%
Gettext Catalog 1.2%
M4 0.8%
Other 2%
Find a file
Colin Watson 25850cfd50 Don't allow insmod when secure boot is enabled. 
Hi,

Fedora's patch to forbid insmod in UEFI Secure Boot environments is fine
as far as it goes.  However, the insmod command is not the only way that
modules can be loaded.  In particular, the 'normal' command, which
implements the usual GRUB menu and the fully-featured command prompt,
will implicitly load commands not currently loaded into memory.  This
permits trivial Secure Boot violations by writing commands implementing
whatever you want to do and pointing $prefix at the malicious code.

I'm currently test-building this patch (replacing your current
grub-2.00-no-insmod-on-sb.patch), but this should be more correct.  It
moves the check into grub_dl_load_file.
2015-04-22 12:47:49 -07:00
build-aux * build-aux/snippet: Add missing gnulib files. 2013-04-17 07:00:37 +02:00
conf Revert " Use -Wl,--no-relax rather than -mno-relax for uniformity." 2014-09-21 19:02:11 +02:00
docs * docs/grub-dev.texi (Finding your way around): The build system no 2014-06-26 14:20:17 +01:00
grub-core Don't allow insmod when secure boot is enabled. 2015-04-22 12:47:49 -07:00
include Don't allow insmod when secure boot is enabled. 2015-04-22 12:47:49 -07:00
m4 Import new gnulib. 2013-04-11 21:12:46 +02:00
po linguas: use en_US as UTF-8 locale, C.UTF-8 is not a standard locale. 2014-10-14 12:20:26 -07:00
tests gpt: add search by partition label and uuid commands 2014-11-27 18:49:24 -08:00
themes/starfield Starfield theme. 2012-02-23 17:21:38 +01:00
unicode * unicode: Import Unicode 6.0 data. 2011-12-25 16:17:25 +01:00
util cleanup: grub_cpu_to_XXX_compile_time for constants 2014-09-22 20:47:10 +04:00
.gitignore gpt: start new GPT module 2014-10-18 13:54:54 -07:00
ABOUT-NLS automake commit without merge history 2010-05-06 11:34:04 +05:30
acinclude.m4 fix removal of {cpu,machine} links on mingw/msys 2014-01-18 22:48:04 +04:00
AUTHORS 2005-09-03 Yoshinori K. Okuji <okuji@enbug.org> 2005-09-03 16:54:27 +00:00
autogen.sh Generate Makefile.*.am directly from gentpl.py, eliminating the use of Autogen. The Autogen definitions files remain intact as they offer a useful abstraction. 2013-11-26 17:13:01 +00:00
BUGS * BUGS: New file. 2011-01-11 00:06:01 +01:00
ChangeLog grub-fs-tester: consistently print output of grub ls if test fails 2014-11-20 20:56:51 +03:00
config.h.in Remove leftover options defines. 2013-12-23 18:17:02 +01:00
configure.ac Fix in-tree --platform=none 2014-09-25 20:59:26 +01:00
COPYING 2007-07-22 Yoshinori K. Okuji <okuji@enbug.org> 2007-07-21 23:32:33 +00:00
coreboot.cfg * coreboot.cfg: Add missing file. 2013-11-20 00:52:23 +01:00
geninit.sh automake commit without merge history 2010-05-06 11:34:04 +05:30
gentpl.py Remove xen VFB. 2013-12-18 18:43:09 +01:00
INSTALL reintroduce BUILD_LDFLAGS for the cross-compile case 2014-01-18 19:50:54 +04:00
linguas.sh * linguas.sh: Remove autogenerated *.po. 2012-04-07 19:44:50 +02:00
Makefile.am Add a new "none" platform that only builds utilities 2014-09-23 12:06:30 +01:00
Makefile.util.def gpt: add search by partition label and uuid commands 2014-11-27 18:49:24 -08:00
NEWS * NEWS: Add few missing entries. 2014-01-18 16:31:10 +01:00
README * README: Point to the Info manual. 2010-07-13 12:20:32 +01:00
THANKS 2009-12-11 Robert Millan <rmh.grub@aybabtu.com> 2009-12-11 22:44:47 +00:00
TODO 2008-01-07 Robert Millan <rmh@aybabtu.com> 2008-01-07 19:21:34 +00:00

README 

This is GRUB 2, the second version of the GRand Unified Bootloader.
GRUB 2 is rewritten from scratch to make GNU GRUB cleaner, safer, more
robust, more powerful, and more portable.

See the file NEWS for a description of recent changes to GRUB 2.

See the file INSTALL for instructions on how to build and install the
GRUB 2 data and program files.

Please visit the official web page of GRUB 2, for more information.
The URL is <http://www.gnu.org/software/grub/grub.html>.

More extensive documentation is available in the Info manual,
accessible using 'info grub' after building and installing GRUB 2.
Please look at the GRUB Wiki <http://grub.enbug.org> for testing
procedures.

There are a number of important user-visible differences from the
first version of GRUB, now known as GRUB Legacy. For a summary, please
see:

  info grub Introduction 'Changes from GRUB Legacy'