You might be right. I think that the Linux kernel doesn’t have an ABI though, so I believe the driver has to be built for the current version of the kernel. I think the idea is also that the driver is signed by the distro, not Microsoft, so the risk of random drivers getting signed accidentally is probably much lower.
threaded - newest
It they’ve already got admin privileges, you’re already fucked.
Other OSes like Linux try to maintain this security boundary, though: www.man7.org/linux/…/kernel_lockdown.7.html
That’s just a criticism of the Windows kernel.
.
You might be right. I think that the Linux kernel doesn’t have an ABI though, so I believe the driver has to be built for the current version of the kernel. I think the idea is also that the driver is signed by the distro, not Microsoft, so the risk of random drivers getting signed accidentally is probably much lower.
depends, they can also loaded via dkms which may not require it
.
It kinda depends, on custom kernels DKMS can be incredibly helpful. Like for a hardened kernel, a lot of drivers may be loaded via DKMS.
Yeah, it actually looks like Ubuntu leaves the module signing key accessible to root on the filesystem:
wiki.ubuntu.com/UEFI/SecureBoot#Security_implicat…
So root access basically gives you kernel access, if you just sign a malicious kernel module with the MOK.