Slashdot Mirror
Systemd Getting UEFI Boot Loader
New submitter mrons writes: Many new features are coming for systemd. This includes the ability to do a full secure boot. As Lennart Poettering mentions in a Google+ comment: "This is really just about providing the tools to implement the full trust chain from the firmware to the host OS, if SecureBoot is available. ... Of course, if you don't have EFI SecureBoot, than nothing changes. Also if you turn it off, than nothing changes either. [sic]" Phoronix notes, "Gummiboot is a simple UEFI boot manager that's been around for a few years but only receives new work from time-to-time. Lennart and Kay Sievers are looking at adding Gummiboot to systemd to complete the safety chain of the boot process with UEFI Secure Boot. Systemd will communicate with this UEFI boot loader to ensure the system didn't boot into a compromised state."
To boot, with systemd's ability to listen on the network, it has a good chance of becoming a massive remote root exploit in the waiting.
Inetd has been doing that for years. It has since moved to a different project. Big deal?
The thing I worry about is that, since Red Hat (which controls systemd) is a USA company, it is quite likely in bed with the NSA, which has been *proven* to be spying on everyone worldwide as much as it can. So it is possible that there's exploits built into systemd to allow NSA spying.
I would feel much safer if it were a project made by a company in some other country, like Finland, not an American company. American companies cannot be trusted to protect our privacy, or really trusted in any way at all.