TItle

  • devnev@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    8
    ·
    1 day ago

    Same for all Linuxes, it’s a current limitation of the Linux kernel. There’s an open issue about it, essentially working out how to use the TPM to sign the memory dump so that secureboot will accept the signature and load it from disk.

    • setVeryLoud(true);@lemmy.ca
      link
      fedilink
      arrow-up
      2
      ·
      12 hours ago

      Which means hibernating is currently insecure on Linux as anyone can extract your disk and read the contents of your memory.

      Google got around this with ChromeOS, something about user / kernel mode, but I forget how.