[systemd-devel] How to factory reset?
tobias.hunger at gmail.com
Wed Mar 11 01:22:12 PDT 2015
> If you're concerned about bootloader configuration modification as a
> threat vector, then it needs to go on an encrypted volume. This
> suggests an initial bootloader configuration that only enables the
> user to supply a passphrase/key file to unlock that volume, and then
> load a new bootloader configuration file.
I am still hoping secure boot and sd-boot will solve this issue
mid-term by making sure all the early boot components are signed
Let's wait and see.
More information about the systemd-devel