Id like to hear thoughts. Of course us gamers hate kernel level anti cheat, but is that actually tied to secureboot?

I know some/most distros can boot in secure mode, so it doesn’t seem like an issue there.

With all the new games moving to it, looks like we will all have to sit them out or install Spyware (microshit) to play. I will opt not to.

  • coherent_domain@infosec.pub
    link
    fedilink
    English
    arrow-up
    0
    ·
    26 days ago

    Secureboot is a security measure to make sure the boot environment have not been tampered with. It would notify about malwares that are able to modify the boot environments.

    I personally don’t find it makes Linux harder to install, like other suggested. Unless you use a surface device, it will happily accept the key for most common linux distro, including Ubuntu and Fedora family. For other distros, you can easily register its key via MOK (obviously require admin privilege for security purpose).

    However, if you need to load additional kernel modules, like nvidia drivers, secureboot can get quite annoying. I am actually quite interested in why Windows don’t have a problem loading additional drivers, yet linux do.

    In the end, I feel if you use a distro it supports there is no reason to leave it off; if you find it annoying, yet okay with a downgrade in security, then you might want to leave it off.

    • sugar_in_your_tea@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      0
      ·
      26 days ago

      Isn’t Windows a hybrid kernel? Perhaps things like drivers technically don’t run in the kernel and instead technically operate outside of it. Linux loads kernel modules directly, so maybe that’s the issue?

      Or maybe drivers are also signed by Microsoft’s key?

      I don’t know a ton about Secure Boot, so maybe it’s something else entirely.