Re: Signature verification in GRUB

[Matthew Garrett]

On Tue, Oct 09, 2012 at 06:32:49PM -0600, Chris Murphy wrote:

> Basically Fedora 18 will be the first Fedora to support UEFI Secure 
> Boot. They are moving to a shim bootloader before GRUB2 because GRUB2 
> is GPLv3 licensed, which requires making signing keys available 
> (Installation Method requirement) so users can still make their own 
> modifications and boot the system with those modifications.

This isn't quite accurate - GPLv3 wasn't an issue, but using shim makes 
it easier to guarantee that users can exercise their freedoms and also 
means we don't have to upload a binary to Microsoft every time we update 
grub.

-- 
Matthew Garrett | address@hidden