LWN.net's Journal
[Most Recent Entries]
[Calendar View]
Wednesday, June 2nd, 2021
| Time |
Event |
| 1:53p |
Garrett: Producing a trustworthy x86-based Linux appliance Matthew Garrett has written up the long, complex series of steps required to build an x86 device that only boots code that the creator wants to run there. " At this point everything
in the boot process is cryptographically verified, and so should be
difficult to tamper with. Unfortunately this isn't really sufficient - on
x86 systems there's typically no verification of the integrity of the
secure boot database. An attacker with physical access to the system could
attach a programmer directly to the firmware flash and rewrite the secure
boot database to include keys they control. They could then replace the
boot image with one that they've signed, and the machine would happily boot
code that the attacker controlled. We need to be able to demonstrate that
the system booted using the correct secure boot keys, and the only way we
can do that is to use the TPM." | | 2:58p |
openSUSE Leap 15.3 released OpenSUSE
Leap 15.3 has been released. " There is one huge change from the
previous Leap versions. openSUSE Leap 15.3 is built not just from SUSE
Linux Enterprise source code like in previous versions, but built with the
exact same binary packages, which strengthens the flow between Leap and SLE
like a yin yang." There are a lot of new features as well, see the announcement for details. | | 3:04p |
Security updates for Wednesday
Security updates have been issued by Debian (squid), Fedora (dhcp), openSUSE (gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly and slurm), Oracle (glib2 and kernel), Red Hat (kernel, kernel-rt, perl, and tcpdump), Scientific Linux (glib2), SUSE (bind, dhcp, lz4, and shim), and Ubuntu (dnsmasq, lasso, and python-django). | | 5:26p |
McQueen: Next steps for the GNOME Foundation Robert McQueen takes
a look at the state of the GNOME Foundation.
[We’ve] got a larger staff team than GNOME has ever had before. We’ve widened the GNOME software ecosystem to include related apps and projects under the GNOME Circle banner, we’ve helped get GTK 4 out of the door, run a wider-reaching program in the Community Engagement Challenge, and consistently supported better infrastructure for both GNOME and the Linux app community in Flathub.
Aside from another grant from Endless (note: my employer), our fundraising hasn’t caught up with this pace of activities. As a result, the Board recently approved a budget for this financial year which will spend more funds from our reserves than we expect to raise in income. Due to our reserves policy, this is essentially the last time we can do this: over the next 6-12 months we need to either raise more money, or start spending less.
| | 9:10p |
[$] Growing pains for Fedora CoreOS When last we looked in on Fedora CoreOS back in December, it was under consideration to become an official Fedora edition. That has not happened, yet at least, but it would seem that the CoreOS "emerging edition" is still undergoing some difficulties trying to fit in with the rest of Fedora. There are differences between the needs of a container operating system and those of more general-purpose distributions, which still need to be worked out if Fedora CoreOS is going to "graduate". |
|