PR than contains the fixes for the issues I have opened#27
PR than contains the fixes for the issues I have opened#27solsticedhiver wants to merge 3 commits intograzzolini:masterfrom
Conversation
|
I don't think this software is meant to look for malicious file installed by packages, or whatever. Also, /boot is not enough, because your ESP could be mounted on /efi. By the way, I am now mounting the ESP on /efi, and keep /boot in the encrypted root partition. Also using UKI and Secure Boot, I am signing the efi executable. so this software is less relevant for me. I would suggest anyone to follow that scheme that make almost irrelevant chkboot. |
|
For any scenario where /boot (or the relevant efi partition) is not encrypted, this software is meant to notify the user in the event that any files in the boot partition are modified by something other than the user. Your PR only monitors for updates to packages performed by the user. Since those actions are always legitimate, no warnings will ever be thrown and the purpose of this software has been undermined. |
Please let me know of anything