undefined | Better HN

0 pointsCu3PO425y ago0 comments

Hm, interesting. I can't seem to find my source anylonger either. The wording "kernel" does suggest to me that this is about a check a bootloader performs. If you were to boot another OS, you'd probably have a different boot loader as well.

This tweet https://twitter.com/never_released/status/133243677102043545... from the same author suggests M1 is "not any more locked down than [...] Intel", so I'm not fully sure about the technical details, but in the end you should be able to boot your own code.

0 comments

my1235y ago

The lowest security level, permissive, allows to mess with the Secure Boot policy at will.

When you use kmutil to add a custom boot entry, enrolling the hash of your executable to the Secure Boot policy is handled automatically as part of the tool.

j / k navigate · click thread line to collapse

0 comments

my1235y ago

The lowest security level, permissive, allows to mess with the Secure Boot policy at will.

When you use kmutil to add a custom boot entry, enrolling the hash of your executable to the Secure Boot policy is handled automatically as part of the tool.

j / k navigate · click thread line to collapse