Tag Info

Hot answers tagged


Best option is just to encrypt the Linux partition, e.g. with LUKS. That way the Windows 7 partition can't actually access any of the data on the other partition. Technically it can still read and write to the partition (there's no way to prevent this) but the data it sees is all encrypted.


This depends what you mean by “the overall concept of secure boot”. Pretty much all secure boot systems have several components, starting with one in ROM and ending with an operating system or even programs within that operating system. A typical boot chain is ROM → OEM bootloader → OS bootloader → OS kernel → OS startup programs. A typical secure boot ...


There are some variables to take into account. First of all it's not trivial to just access the Linux partitions. Mainly because, natively, Windows does not support ext3 or ext4 which are used to install Linux on. Without these drivers it's impossible to access the drives. Malware will, normally, not have onboard read/write drivers for these filesystems. ...


This is using Trusted Platform Module to defeat the Evil Maid Attack. In short this is to insure that your bootloader hasn't been tampered with, which could undermine an encrypted file system.


The TPM support is very rudimentary at this time. You'll need a bootloader that can extend the chain of trust and I only know of TrustedGRUB which is a pretty old version of GRUB with TPM-related functionalities added. On the other hand, I believe the TPM is just all hype related to Bitlocker, practically it provides very little security (maybe that's by ...


I recommend locking down GRUB and taking away access to the GRUB shell. GRUB manual: Authentication and authorisation (Archived here.) By default, the boot loader interface is accessible to anyone with physical access to the console: anyone can select and edit any menu entry, and anyone can get direct access to a GRUB shell prompt. For most systems, ...

Only top voted, non community-wiki answers of a minimum length are eligible