cm0002 to Linux · 6 months agoNew Linux Security Flaw Uses Initramfs to Inject Malwarewww.omgubuntu.co.ukexternal-linkmessage-square28linkfedilinkarrow-up197arrow-down14
arrow-up193arrow-down1external-linkNew Linux Security Flaw Uses Initramfs to Inject Malwarewww.omgubuntu.co.ukcm0002 to Linux · 6 months agomessage-square28linkfedilink
minus-squareInfernal_pizza@lemmy.dbzer0.comlinkfedilinkEnglisharrow-up1·6 months agoThat makes sense. Would a signed initramfs be possible though? Since it’s usually rebuilt after most system updates?
minus-square9tr6gyp3@lemmy.worldlinkfedilinkEnglisharrow-up2·6 months agoDepends on the OS, but you can generally have mkinitcpio handle generating new UKIs after updates and also have it trigger something like sbctl to re-sign images.
That makes sense. Would a signed initramfs be possible though? Since it’s usually rebuilt after most system updates?
Depends on the OS, but you can generally have
mkinitcpiohandle generating new UKIs after updates and also have it trigger something likesbctlto re-sign images.