UEFI secure boot

[Bill Stanley]

On 09/26/2011 02:53 PM, Colin Watson wrote:
> On Fri, Sep 23, 2011 at 02:13:29PM -0500, Billie Walsh wrote:
>> On 09/23/2011 12:58 PM, Frank wrote:
>>> Check
>>> http://news.softpedia.com/news/Windows-8-PCs-with-UEFI-Secure-Boot-Won-t-Lock-Out-Other-Platforms-223377.shtml
>>
>> From: http://en.wikipedia.org/wiki/Unified_Extensible_Firmware_Interface
>>
>> Linux has been able to use EFI at boot time since early 2000, using
>> the elilo EFI boot loader or, more recently, EFI versions of GRUB.
>
> I'm afraid that's not relevant.
>
> The recent news pertains to a new release of UEFI, version 2.3.1, which
> introduces "secure boot" as an optional feature (although one we would
> not be surprised to see many OEMs enable by default).  Sure, GRUB can
> boot under such a system - if you get it signed by an authorised key,
> implying that you can't effectively install a modified version, or if
> you disable "secure boot" in your firmware setup, which not only sounds
> bad but it seems may well also impede dual-booting Windows.


That brings up another issue...

Often when you upgrade Ubuntu the grub boot-loader is modified.  Would 
changes to GRUB would be forbidden?  How would the Ubuntu upgrade work?
This assumes that you can get Ubuntu to boot in the first place.

Bill Stanley