Ubuntu 16.04 Secure Boot Policy

[Ralf Mardorf]

On 04.07.2016, at 00:02, Tom H wrote:
> The Linux developers who put together a Linux solution/option for
> Secure Boot must've thought that there's a case to be made for Secure
> Boot on Linux.

Yes hardware and multi-boot with a proprietary OS that enforces usage of secure boot is at least one reason.

> Think malware existing outside of the OS and targeting
> the pre-kernel boot process.

Are there some examples for such malware that affected Linux or BSD machines, where secure boot would have protected those machines or are there any other evidences for more security for Linux or BSD machines by secure boot?

> If there's a way for Ubuntu to offer its users the possibility of
> using Secure Boot and dkms-compiled modules, why not?

Sure, if somebody likes to maintain this option, it's ok. It's still more user-friendly to disable secure boot, than to deal with it, isn't it?

Regards,
Ralf