GRUB: new maintainers, news and future. Vladimir Serbinenko Daniel Kiper Maria Komar

Size: px
Start display at page:

Download "GRUB: new maintainers, news and future. Vladimir Serbinenko Daniel Kiper Maria Komar"

Transcription

1 GRUB: new maintainers, news and future Vladimir Serbinenko Daniel Kiper Maria Komar

2 GRUB maintainers

3 Vladimir Serbinenko (phcoder) GRUB maintainers

4 GRUB maintainers Vladimir Serbinenko (phcoder) Andrey Borzenkov (arvidjaar)

5 GRUB maintainers Vladimir Serbinenko (phcoder) Andrey Borzenkov (arvidjaar) Daniel Kiper (daniel.kiper)

6 GRUB maintainers Vladimir Serbinenko (phcoder) Andrey Borzenkov (arvidjaar) Daniel Kiper (daniel.kiper) Alex Burmashev (alexander.burmashev)

7 GRUB 2.02

8 GRUB 2.02 GRUB 2.02~rc1 was released

9 GRUB 2.02 GRUB 2.02~rc1 was released Only critical patches are now accepted

10 GRUB 2.02 GRUB 2.02~rc1 was released Only critical patches are now accepted Release is expected in the end of February

11 GRUB 2.02 GRUB 2.02~rc1 was released Only critical patches are now accepted Release is expected in the end of February We need your help to find bugs!

12 GRUB 2.02 GRUB 2.02~rc1 was released Only critical patches are now accepted Release is expected in the end of February We need your help to find bugs! GRUB 2.02~rc1 is available at ub-2.02~rc1.tar.xz

13 New supported platforms

14 New supported platforms

15 New supported platforms uboot

16 New supported platforms uboot arm EFI

17 New supported platforms uboot arm EFI aarch64 EFI

18 New supported platforms uboot arm EFI aarch64 EFI *arm coreboot

19 New supported platforms uboot arm EFI aarch64 EFI *arm coreboot

20 New supported platforms uboot arm EFI aarch64 EFI *arm coreboot PV guests i386 x86_64

21 New Multiboot2 Features

22 New Multiboot2 Features EFI boot services availability for OS

23 New Multiboot2 Features EFI boot services availability for OS Support for self relocatable OS images (ELF relocs are not supported yet); a working example is under review on Xen-devel ML

24 and plenty of fixes

25 Future plans & ideas

26 Future plans & ideas make all tests run without root

27 Future plans & ideas make all tests run without root make automated system regularly check GRUB tree

28 Future plans & ideas make all tests run without root make automated system regularly check GRUB tree kernel verification

29 Future plans & ideas make all tests run without root make automated system regularly check GRUB tree kernel verification feel free to contribute!

30 Kernel verification

31 Kernel verification GPG signatures

32 Kernel verification GPG signatures TPM

33 Kernel verification GPG signatures TPM UEFI SecureBoot and shim

34 Kernel verification GPG signatures TPM UEFI SecureBoot and shim migrate to common framework to separate hooks from methods after 2.02

35 GRUB mascot beta-version

36 GRUB mascot beta-version

37 GRUB mascot beta-version

38 GRUB mascot beta-version

39 GRUB mascot beta-version

40 GRUB mascot beta-version

41 GRUB mascot beta-version

42 GRUB mascot beta-version

43 F2F meeting with maintainers

44 F2F meeting with maintainers Today at in Jam Hotel rooftop bar

45 F2F meeting with maintainers Today at in Jam Hotel rooftop bar Everyone pays for himself/herself

46 F2F meeting with maintainers Today at in Jam Hotel rooftop bar Everyone pays for himself/herself Ask Maria for further questions mail/hangouts

47

48 Links & acknowledgements GRUB maintainers photos are provided by maintainers or taken from open sources ARM is a registered trademark of ARM Limited (or its subsidiaries) in the EU and/or elsewhere. All rights reserved. Xen logo on page 3 is taken from Linux penguin on page 11 is taken from de.html GRUB crab mascot design and copyright: Maria (Mariia) Komar

GRUB upstream and distros cooperation

GRUB upstream and distros cooperation GRUB upstream and distros cooperation Daniel Kiper Oracle, Software Developer, GRUB upstream maintainer FOSDEM 2019, February 3rd, 2019 Presentation Agenda 1 2 3 4 5 GRUB maintainers What happened last

More information

Xen on ARM ARMv7 with virtualization extensions

Xen on ARM ARMv7 with virtualization extensions Xen on ARM ARMv7 with virtualization extensions Stefano Stabellini Why? Why? smartphones: getting smarter Quad-core 1.4 GHz Cortex-A9 ARM Servers coming to market 4GB RAM, 4 cores per node 3 x 6 x 4 x

More information

EFI Secure Boot, shim and Xen Current Status and Developments

EFI Secure Boot, shim and Xen Current Status and Developments EFI Secure Boot, shim and Xen Current Status and Developments Daniel Kiper Software Developer, GRUB upstream maintainer Platform Security Summit, May 23rd, 2018 Presentation Agenda 1 2 3 4 5 6 UEFI Secure

More information

ARM Trusted Firmware ARM UEFI SCT update

ARM Trusted Firmware ARM UEFI SCT update presented by ARM Trusted Firmware ARM UEFI SCT update UEFI US Fall Plugfest September 20-22, 2016 Presented by Charles García-Tobin (ARM) Updated 2011-06-01 Agenda ARM Trusted Firmware What and why UEFI

More information

Hypervisors on ARM Overview and Design choices

Hypervisors on ARM Overview and Design choices Hypervisors on ARM Overview and Design choices Julien Grall Root Linux Conference 2017 ARM 2017 About me Working on ARM virtualization for the past 4 years With ARM since 2016 Co-maintaining

More information

TUX : Trust Update on Linux Kernel

TUX : Trust Update on Linux Kernel TUX : Trust Update on Linux Kernel Suhho Lee Mobile OS Lab, Dankook university suhho1993@gmail.com -- Hyunik Kim, and Seehwan Yoo {eternity13, seehwan.yoo}@dankook.ac.kr Index Intro Background Threat Model

More information

Use of Mojo PowerPoint Template. Your name, Title

Use of Mojo PowerPoint Template. Your name, Title Use of Mojo PowerPoint Template Your name, Title 1 OCP CBW Campus, Branch, Wi-Fi Rajat Ghai Lead OCP-CBW 2 Disaggregation of H/W & S/W at the edge Campus, Branch, Wi-Fi 3 OCP-CBW 2017 H/W (Wi-Fi) 5 open

More information

SSN Lab Assignment: UEFI Secure Boot

SSN Lab Assignment: UEFI Secure Boot SSN Lab Assignment: UEFI Secure Boot A. Bakker J. van der Ham M. Pouw Feedback deadline: November 10, 2016 10:00 CET 1 Introduction UEFI Secure Boot ensures by means of digital signatures that the code

More information

Building U-Boot in CodeWarrior ARMv8

Building U-Boot in CodeWarrior ARMv8 NXP Semiconductors Document Number: AN5347 Application Note Rev. 0, 10/2016 Building U-Boot in CodeWarrior ARMv8 1 Introduction This application note defines guidelines for configuring CodeWarrior for

More information

UEFI ARM Update. UEFI PlugFest March 18-22, 2013 Andrew N. Sloss (ARM, Inc.) presented by

UEFI ARM Update. UEFI PlugFest March 18-22, 2013 Andrew N. Sloss (ARM, Inc.) presented by presented by UEFI ARM Update UEFI PlugFest March 18-22, 2013 Andrew N. Sloss (ARM, Inc.) Updated 2011-06-01 UEFI Spring PlugFest March 2013 www.uefi.org 1 AGENDA economics technology status summary questions

More information

Linux Boot Process. Nassim Eddequiouaq LSE Summer Week 2015

Linux Boot Process. Nassim Eddequiouaq LSE Summer Week 2015 Linux Boot Process Nassim Eddequiouaq LSE Summer Week 2015 Why does boot matter? No boot No boot! OS uses evolving hardware features Faster and more secure please What does Linux need? Hardware initialization

More information

Porting FreeBSD to AArch64

Porting FreeBSD to AArch64 Porting FreeBSD to AArch64 Andrew Turner andrew@fubar.geek.nz 12 June 2015 About me Source committer focusing on ARM Freelance Software Engineer Status of arm64 (AArch64) Support to boot in QEMU committed

More information

Oracle VM Server Recovery Guide. Version 8.2

Oracle VM Server Recovery Guide. Version 8.2 Oracle VM Server Recovery Guide Version 8.2 Oracle VM Server for x86 Recovery Guide The purpose of this document is to provide the steps necessary to perform system recovery of an Oracle VM Server for

More information

Ubuntu installation alongside windows 8/8.1 and 10

Ubuntu installation alongside windows 8/8.1 and 10 Ubuntu installation alongside windows 8/8.1 and 10 Important safety precautions in windows - Before starting the installation process NOTE:1. If you are already using Windows OS in your computer, take

More information

GELI Support for UEFI

GELI Support for UEFI GELI Support for UEFI Eric L. McCorkle September 9, 2017 Disclaimer The content of this presentation does not constitute a statement on behalf of or represent the position of any company or organization.

More information

Tailoring TrustZone as SMM Equivalent

Tailoring TrustZone as SMM Equivalent presented by Tailoring TrustZone as SMM Equivalent Tony C.S. Lo Senior Manager American Megatrends Inc. UEFI Plugfest March 2016 www.uefi.org 1 Agenda Introduction ARM TrustZone SMM-Like Services in TrustZone

More information

Certification. RPM, Boot Loaders, and Kickstart

Certification. RPM, Boot Loaders, and Kickstart Certification RPM, Boot Loaders, and Kickstart UNIT 7 RPM, Boot Loaders, and Kickstart 1 UNIT 7: Objectives Upon completion of this unit the student should be able to: Use RPM to install, remove, update,

More information

Oracle Linux. UEFI Secure Boot Signing Key Update Notice

Oracle Linux. UEFI Secure Boot Signing Key Update Notice Oracle Linux UEFI Secure Boot Signing Key Update Notice F12070-01 November 2018 Oracle Legal Notices Copyright 2018, Oracle and/or its affiliates. All rights reserved. This software and related documentation

More information

Solved How To Manually Remove Old Kernels From Ubuntu 12.04

Solved How To Manually Remove Old Kernels From Ubuntu 12.04 Solved How To Manually Remove Old Kernels From Ubuntu 12.04 Over time, the start up list (GRUB) will become longer as new kernels are added. Never remove your current kernel, else your computer will not

More information

Xen on ARM. Stefano Stabellini

Xen on ARM. Stefano Stabellini Xen on ARM Stefano Stabellini What is Xen? a type-1 hypervisor small footprint (less than 90K LOC) Xen: Open Source GPLv2 with DCO (like Linux) Diverse contributor community Xen: Open Source source: Mike

More information

ViryaOS RFC: Secure Containers for Embedded and IoT. A proposal for a new Xen Project sub-project

ViryaOS RFC: Secure Containers for Embedded and IoT. A proposal for a new Xen Project sub-project ViryaOS RFC: Secure Containers for Embedded and IoT A proposal for a new Xen Project sub-project Stefano Stabellini @stabellinist The problem Package applications for the target Contain all dependencies

More information

Open Source Facebook. David Hendricks: Firmware Engineer Andrea Barberio: Production Engineer

Open Source Facebook. David Hendricks: Firmware Engineer Andrea Barberio: Production Engineer Open Source Firmware @ Facebook David Hendricks: Firmware Engineer Andrea Barberio: Production Engineer Agenda Open source initiatives Problem statement How we're using LinuxBoot at Facebook systemboot

More information

Strengthening the Chain of Trust. Kevin Lane HP Jeff Bobzin Insyde Software

Strengthening the Chain of Trust. Kevin Lane HP Jeff Bobzin Insyde Software presented by Strengthening the Chain of Trust Kevin Lane HP Jeff Bobzin Insyde Software August Updated 22, 2014 2011-06-01 Agenda Quick Intro to UEFI UEFI Myths Using Linux + Secure Boot Continuing the

More information

Implementing Secure Boot: A Refresher on Key & Database Configuration

Implementing Secure Boot: A Refresher on Key & Database Configuration presented by Implementing Secure Boot: A Refresher on Key & Database Configuration UEFI PlugFest March 18-22, 2013 Presented by Tim Lewis, CTO, Insyde Software Updated 2011-06-01 UEFI Spring PlugFest March

More information

How to decide Linux Kernel for Embedded Products. Tsugikazu SHIBATA NEC 20, Feb Embedded Linux Conference 2013 SAN FRANCISCO

How to decide Linux Kernel for Embedded Products. Tsugikazu SHIBATA NEC 20, Feb Embedded Linux Conference 2013 SAN FRANCISCO How to decide Linux Kernel for Embedded Products Tsugikazu SHIBATA NEC 20, Feb. 2013 Embedded Linux Conference 2013 Parc55 @ SAN FRANCISCO Agenda Points to be considered to decide Linux kernel version

More information

ServerReady and Open Standards Accelerating Delivery

ServerReady and Open Standards Accelerating Delivery ServerReady and Open Standards Accelerating Delivery Dong Wei Senior Director and Lead Architect, DE Arm #Arm Tech Symposia Copyright 2018 Arm Tech Symposia, All rights reserved. The Cloud to Edge Infrastructure

More information

Using Linux as a Secure Boot Loader for OpenPOWER Servers

Using Linux as a Secure Boot Loader for OpenPOWER Servers Using Linux as a Secure Boot Loader for OpenPOWER Servers Nayna Jain Thiago Jung Bauermann IBM Linux Technology Center Disclaimer This work represents the view of the author and does not necessarily represent

More information

Introduction to Standards based approach to Server

Introduction to Standards based approach to Server Introduction to Standards based approach to Server Winnie Shao Server & Ecosystem Director Arm Copyright 2018 Arm, All rights reserved. Why do we need a standards-based approach? Arm architecture supports

More information

Advanced Operating Systems and Virtualization. Alessandro Pellegrini A.Y. 2017/2018

Advanced Operating Systems and Virtualization. Alessandro Pellegrini A.Y. 2017/2018 Advanced Operating Systems and Virtualization Alessandro Pellegrini A.Y. 2017/2018 Basic Information Lecture Schedule: Course begins today! Course ends on June 1 st Lecture slots: Tuesday, 08.00 am 10.00

More information

How To Reinstall Grub In Windows 7 With Cd Rom

How To Reinstall Grub In Windows 7 With Cd Rom How To Reinstall Grub In Windows 7 With Cd Rom Sep 23, 2014. I have the Windows 7 install disk (not an upgrade disk). it to CD-ROM, from there you can install windows by inserting the w7 disc and following

More information

Overview. Wait, which firmware? Threats Update methods request_firmware() hooking Regression testing Future work

Overview. Wait, which firmware? Threats Update methods request_firmware() hooking Regression testing Future work http://outflux.net/slides/2014/lss/firmware.pdf Linux Security Summit, Chicago 2014 Kees Cook (pronounced Case ) Overview Wait, which firmware? Threats Update methods request_firmware()

More information

Xen Project 4.4: Features and Futures. Russell Pavlicek Xen Project Evangelist Citrix Systems

Xen Project 4.4: Features and Futures. Russell Pavlicek Xen Project Evangelist Citrix Systems Xen Project 4.4: Features and Futures Russell Pavlicek Xen Project Evangelist Citrix Systems About This Release Xen Project 4.4.0 was released on March 10, 2014. This release is the work of 8 months of

More information

64-bit ARM Unikernels on ukvm

64-bit ARM Unikernels on ukvm 64-bit ARM Unikernels on ukvm Wei Chen Senior Software Engineer Tokyo / Open Source Summit Japan 2017 2017-05-31 Thanks to Dan Williams, Martin Lucina, Anil Madhavapeddy and other Solo5

More information

Integrity-checked block devices with device mapper. Mandeep Baines Will Drewry

Integrity-checked block devices with device mapper. Mandeep Baines Will Drewry Integrity-checked block devices with device mapper Mandeep Baines Will Drewry Huh? We'll talk about our efficient device mapper target that provides read-only access to blocks from another block device

More information

Xen on ARM. How fast is it, really? Stefano Stabellini. 18 August 2014

Xen on ARM. How fast is it, really? Stefano Stabellini. 18 August 2014 Xen on ARM How fast is it, really? Stefano Stabellini 18 August 2014 Status Xen Project 4.4 release: status Features: 64-bit guest support in ARMv8 stable hypercall ABI basic lifecycle operations memory

More information

BIOS Update Release Notes

BIOS Update Release Notes PRODUCTS: DB85FL (Standard BIOS) BIOS Update Release Notes BIOS Version 0131 - FLB8510H.86A.0131.2017.0516.1705 Date: May 16, 2017 ROM Image 8MB Checksum: 0x591F0D92 ROM Image 4MB Checksum: 0x2E8ED563

More information

PreBoot Provisioning Solutions with UEFI

PreBoot Provisioning Solutions with UEFI presented by PreBoot Provisioning Solutions with UEFI UEFI Spring Plugfest May 18-22, 2015 Presented by Zachary Bobroff (AMI) Updated 2011-06-01 UEFI Plugfest May 2015 www.uefi.org 1 Agenda Introduction

More information

(Ab)using Linux as a Trusted Bootloader

(Ab)using Linux as a Trusted Bootloader (Ab)using Linux as a Trusted Bootloader Eric Richter erichte@linux.vnet.ibm.com 1/30 (Ab)using Linux as a Trusted Bootloader Overview 1 Background Info TPM Trusted Boot 2 Petitboot 3 Trusted Petitboot

More information

Enabling User Provided Kernels in Amazon EC2

Enabling User Provided Kernels in Amazon EC2 Enabling User Provided Kernels in Amazon EC2 Version 1.01 AWS is pleased to announce that customers can now run user provided kernels in EC2. Enablement With this feature, Amazon allows you to load a para

More information

Windows IoT Security. Jackie Chang Sr. Program Manager

Windows IoT Security. Jackie Chang Sr. Program Manager Windows IoT Security Jackie Chang Sr. Program Manager Rest Physical access to a device will not give access to data Data & Control Execution Data owner has full control over data processing Motion Transport

More information

UEFI Secure Boot with Dell PowerEdge 14G with VMware ESXi 6.5

UEFI Secure Boot with Dell PowerEdge 14G with VMware ESXi 6.5 UEFI Secure Boot with Dell PowerEdge 14G with VMware ESXi 6.5 This paper explains the changes introduced in UEFI Secure Boot feature from DellEMC 14th generation of servers and VMware ESXi upgrade scenarios.

More information

UEFI What is it? Spring 2017 UEFI Seminar and Plugfest March 27-31, 2017 Presented by Dong Wei (ARM) presented by. Updated

UEFI What is it? Spring 2017 UEFI Seminar and Plugfest March 27-31, 2017 Presented by Dong Wei (ARM) presented by. Updated presented by UEFI What is it? Spring 2017 UEFI Seminar and Plugfest March 27-31, 2017 Presented by Dong Wei (ARM) Updated 2011-06- 01 UEFI Plugfest March 2017 www.uefi.org 1 Agenda Introduction Background

More information

Xen VGA passthrough. 1.1 VGA passthrough. 1 Introduction. 2 Xen architecture. 2.1 Structure

Xen VGA passthrough. 1.1 VGA passthrough. 1 Introduction. 2 Xen architecture. 2.1 Structure Xen VGA passthrough Author: Yuri Schaeffer BSc, yuri.schaeffer@os3.nl System & Network Engineering, Univeriteit van Amsterdam Supervisor: Mendel Mobach, Systemhouse Mobach bv Abstract After a small introduction

More information

Zephyr Kernel Installation & Setup Manual

Zephyr Kernel Installation & Setup Manual Zephyr Kernel Installation & Setup Manual Zephyr kernel is a small footprint Single address space OS, i.e, it combines application specific code with a custom kernel to create a monolithic image that gets

More information

Attacking and Defending the Platform

Attacking and Defending the Platform presented by Attacking and Defending the Platform Spring 2018 UEFI Seminar and Plugfest March 26-30, 2018 Presented by Erik Bjorge and Maggie Jauregui (Intel) Legal Notice No computer system can be absolutely

More information

Booting Quest on Intel Galileo

Booting Quest on Intel Galileo Booting Quest on Intel Galileo 1 Things You Need An Intel Galileo Board with the switching power supply. Figure 1: Intel Galileo Board A DB9 female to 3.5mm serial cable. A microsd card less than 32GB.

More information

The only open-source type-1 hypervisor

The only open-source type-1 hypervisor Monika Danikáková What is Xen? The only open-source type-1 hypervisor For Unix and Unix-like OS Linux, NetBSD and OpenSolaris From ancient greek term Xenos (ξένος), guest-friends Developed by the University

More information

Protecting your system from the scum of the universe

Protecting your system from the scum of the universe Protecting your system from the scum of the universe Gilad Ben-Yossef gilad@benyossef.com Twitter: @giladby About me My name is Gilad Ben-Yossef. I work on applied cryptography and security of the upstream

More information

UEFI Secure Boot and DRI. Kalyan Kumar N

UEFI Secure Boot and DRI. Kalyan Kumar N UEFI Secure Boot and DRI Kalyan Kumar N Agenda Introduction RDK Boot Loader DRI (Disaster Recovery Image) RootFS Validation Build Environment Introduction Standardization of the RDK set-top box firmware

More information

Protecting your system from the scum of the universe

Protecting your system from the scum of the universe Protecting your system from the scum of the universe Gilad Ben-Yossef gilad@benyossef.com Twitter: @giladby About me My name is Gilad Ben-Yossef. I work on applied cryptography and security of the upstream

More information

Practical Xen Testing at Intel

Practical Xen Testing at Intel Practical Xen Testing at Intel Nov. 2009 Haicheng Li Jiajun Xu Xen Summit Asia 2009 Legal Information INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION

More information

wiki.xenproject.org/wiki/submitting_xen_project _Patches

wiki.xenproject.org/wiki/submitting_xen_project _Patches wiki.xenproject.org/wiki/submitting_xen_project _Patches www.xenproject.org/help/contributionguidelines.html Preparation: Contributor gathers changes Contributor sends patch or patch series with meta-information

More information

Welcome to SUSE Expert Days 2017 Service Delivery with DevOps

Welcome to SUSE Expert Days 2017 Service Delivery with DevOps Welcome to SUSE Expert Days 2017 Service Delivery with DevOps Changing Application Service Delivery with DevOps 2 Key Components for DevOps Success Good habits and people Development done now Automate

More information

Intel s Virtualization Extensions (VT-x) So you want to build a hypervisor?

Intel s Virtualization Extensions (VT-x) So you want to build a hypervisor? Intel s Virtualization Extensions (VT-x) So you want to build a hypervisor? Mr. Jacob Torrey May 13, 2014 Dartmouth College 153 Brooks Road, Rome, NY 315.336.3306 http://ainfosec.com @JacobTorrey torreyj@ainfosec.com

More information

Productizing Linux Applications. What We ll Cover

Productizing Linux Applications. What We ll Cover Productizing Linux Applications Peter Ashford Ashford Computer Consulting Service 9/08/2015. What We ll Cover The first part of this presentation describes a process that will assist you in delivering

More information

Originally prepared by Lehigh graduate Greg Bosch; last modified April 2016 by B. Davison

Originally prepared by Lehigh graduate Greg Bosch; last modified April 2016 by B. Davison Virtualization Originally prepared by Lehigh graduate Greg Bosch; last modified April 2016 by B. Davison I. Introduction to Virtualization II. Virtual liances III. Benefits to Virtualization IV. Example

More information

ARMv8.3 Pointer Authentication

ARMv8.3 Pointer Authentication ARMv8.3 Pointer Authentication Mark Rutland Linux Security Summit September 14, 2017 ARM 2017 Background Memory protections are commonly deployed today... largely prevents code injection

More information

Firmware. OSF (open System. Gundrala Devender Goud Engineering Director/Azure/Microsoft OCP/OSF Project Lead

Firmware. OSF (open System. Gundrala Devender Goud Engineering Director/Azure/Microsoft OCP/OSF Project Lead Open System Firmware OSF (open System Firmware) Intro and Progress Update Gundrala Devender Goud Engineering Director/Azure/Microsoft OCP/OSF Project Lead Where does System Firmware reside in a typical

More information

Hacking the Extensible Firmware Interface. John Heasman, Director of Research

Hacking the Extensible Firmware Interface. John Heasman, Director of Research Hacking the Extensible Firmware Interface John Heasman, Director of Research Agenda The role of the BIOS Attacking a legacy BIOS Limitations of the legacy BIOS Introduction to the EFI environment Attacking

More information

LSS-EU 2018: Overview and Recent Developments Linux Integrity Subsystem

LSS-EU 2018: Overview and Recent Developments Linux Integrity Subsystem LSS-EU 2018: Overview and Recent Developments Linux Integrity Subsystem Mimi Zohar 1 IBM Research Linux Integrity Subsystem & Ecosystem IMA Overview IMA-measurement, IMA-appraisal, IMA-audit Relationship

More information

Operating system hardening

Operating system hardening Operating system Comp Sci 3600 Security Outline 1 2 3 4 5 6 What is OS? Hardening process that includes planning, ation, uration, update, and maintenance of the operating system and the key applications

More information

Past, Present, and Future Justin Johnson Senior Principal Firmware Engineer

Past, Present, and Future Justin Johnson Senior Principal Firmware Engineer Dell Firmware Security Past, Present, and Future Justin Johnson Senior Principal Firmware Engineer justin.johnson1@dell.com Dell Security 2 What does BIOS do? Configure and Test System Memory Configure

More information

Introduction to Embedded Bootloader. Intel SSG/SSD/UEFI

Introduction to Embedded Bootloader. Intel SSG/SSD/UEFI Introduction to Embedded Bootloader Intel SSG/SSD/UEFI Legal Disclaimer INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION WITH INTEL PRODUCTS. NO LICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE,

More information

System Prep Applications A Powerful New Feature in UEFI 2.5

System Prep Applications A Powerful New Feature in UEFI 2.5 presented by System Prep Applications A Powerful New Feature in UEFI 2.5 UEFI Spring Plugfest May 18-22, 2015 Presented by Kevin Davis Insyde Software Updated 2011-06-01 UEFI Plugfest May 2015 www.uefi.org

More information

ARM Performance Libraries Current and future interests

ARM Performance Libraries Current and future interests ARM Performance Libraries Current and future interests Chris Goodyer Senior Engineering Manager, HPC Software Workshop on Batched, Reproducible, and Reduced Precision BLAS 25 th February 2017 ARM Performance

More information

Processor Expert Software for i.mx Processors Version 1.0

Processor Expert Software for i.mx Processors Version 1.0 Release Notes Processor Expert Software for i.mx Processors Version 1.0 1 Overview Processor Expert Software for i.mx processors is a suite of configuration tools for i.mx family processors. This file

More information

ECE 471 Embedded Systems Lecture 12

ECE 471 Embedded Systems Lecture 12 ECE 471 Embedded Systems Lecture 12 Vince Weaver http://www.eece.maine.edu/~vweaver vincent.weaver@maine.edu 8 October 2015 Announcements Homework grades have been sent out, let me know if you did not

More information

Firmware Implementation Techniques to Achieve Windows 8 Fast Boot

Firmware Implementation Techniques to Achieve Windows 8 Fast Boot presented by Firmware Implementation Techniques to Achieve Windows 8 Fast Boot UEFI Summer Summit July 16-20, 2012 Presented by Jeff Bobzin Insyde Software Updated 2011-06-01 UEFI Summer Summit July 2012

More information

CIS 4360 Secure Computer Systems Secured System Boot

CIS 4360 Secure Computer Systems Secured System Boot CIS 4360 Secure Computer Systems Secured System Boot Professor Qiang Zeng Spring 2017 Previous Class Attacks against System Boot Bootkit Evil Maid Attack Bios-kit Attacks against RAM DMA Attack Cold Boot

More information

OVERDRIVE Quick Start Guide. v.1.0

OVERDRIVE Quick Start Guide. v.1.0 OVERDRIVE 1000 Quick Start Guide v.1.0 TABLE OF CONTENTS 1. Introduction 3 2. Connections 3 3. Console Connection 4 3.1 Windows 4 3.2 Linux 5 3.3 Mac OS X 6 3.4 Power-up Procedure 6 3.5 Logging In 9 4.

More information

I Don't Want to Sleep Tonight:

I Don't Want to Sleep Tonight: I Don't Want to Sleep Tonight: Subverting Intel TXT with S3 Sleep Seunghun Han, Jun-Hyeok Park (hanseunghun parkparkqw)@nsr.re.kr Wook Shin, Junghwan Kang, HyoungChun Kim (wshin ultract khche)@nsr.re.kr

More information

Xen Summit Spring 2007

Xen Summit Spring 2007 Xen Summit Spring 2007 Platform Virtualization with XenEnterprise Rich Persaud 4/20/07 Copyright 2005-2006, XenSource, Inc. All rights reserved. 1 Xen, XenSource and XenEnterprise

More information

Microsoft UEFI Certification Authority

Microsoft UEFI Certification Authority presented by Microsoft UEFI Certification Authority UEFI PlugFest September 19-20, 2013 Presented by Jeremiah Cox (Microsoft Corp.) Updated 2011-06-01 UEFI PlugFest September 2013 www.uefi.org 1 Agenda

More information

Collecting Linux Trace without using CodeWarrior

Collecting Linux Trace without using CodeWarrior Freescale Semiconductor Application Note Document Number: AN5001 Collecting Linux Trace without using CodeWarrior 1. Introduction This document guides you how to collect Linux trace directly from QDS or

More information

Notes on Using the Beta VMware Importer Tool on Your Mac VMware Importer 1 Beta 2

Notes on Using the Beta VMware Importer Tool on Your Mac VMware Importer 1 Beta 2 Notes on Using the Beta VMware Importer Tool on Your Mac VMware Importer 1 Beta 2 The VMware Web site also provides the latest product updates. If you have comments about this documentation, submit your

More information

Digging Into The Core of Boot

Digging Into The Core of Boot Digging Into The Core of Boot Yuriy Bulygin Oleksandr Bazhaniuk @c7zero @ABazhaniuk Agenda Intro Recap of MMIO BAR Issues in Coreboot & UEFI Coreboot ACPI GNVS Pointer Issue SMI Handler Issues in Coreboot

More information

UEFI and PCI bootkits. Pierre Chifflier PacSec 2013

UEFI and PCI bootkits. Pierre Chifflier PacSec 2013 UEFI and PCI bootkits Pierre Chifflier PacSec 2013 ANSSI Created on July 7th 2009, the ANSSI (French Network and Information Security Agency) is the national authority for the defense and the security

More information

di-netboot-assistant: Install Debian in your LAN

di-netboot-assistant: Install Debian in your LAN di-netboot-assistant: Install Debian in your LAN Automatic Installation of Debian GNU/Linux Andreas B. Mundt andi@debian.org Andreas B. Mundt DebConf 2018, Taiwan 1 / 22 Overview 1 TFTP/PXE Boot Install

More information

BIOS Update Release Notes

BIOS Update Release Notes BIOS Update Release Notes PRODUCTS: NUC5CPYH, NUC5PPYH, NUC5PGYH (Standard BIOS) BIOS Version 0058 - PYBSWCEL.86A.0058.2016.1102.1842 Date: November 02, 2016 Security Enhancements BIOS Version - PYBSWCEL.86A.0057.2016.1012.1134

More information

BIOS Update Release Notes

BIOS Update Release Notes BIOS Update Release Notes PRODUCTS: NUC5CPYH, NUC5PPYH, NUC5PGYH (Standard BIOS) BIOS Version 0064 - PYBSWCEL.86A.0064.2017.0815.1055 Date: August 15, 2017 Option ROM: Build 1007 PC 14.34 UEFI Driver:

More information

OP-TEE Using TrustZone to Protect Our Own Secrets

OP-TEE Using TrustZone to Protect Our Own Secrets OP-TEE Using TrustZone to Protect Our Own Secrets ROM-Code Bootloader OP-TEE Kernel Root File System ELC Europe 2017, 23.10.2017 Marc Kleine-Budde Slide 1 - http://www.pengutronix.de

More information

UEFI, SecureBoot, DeviceGuard, TPM a WHB (un)related technologies

UEFI, SecureBoot, DeviceGuard, TPM a WHB (un)related technologies GOLD PARTNER: Hlavní partner: Hlavní odborný partner: UEFI, SecureBoot, DeviceGuard, TPM a WHB (un)related technologies Ing. Ondřej Ševeček GOPAS a.s. MCSM:Directory MVP:Security CISA CISM CEH CHFI ondrej@sevecek.com

More information

Oracle VM Tips and Best Practices

Oracle VM Tips and Best Practices Oracle VM Tips and Best Practices To become a successful Oracle VM professional Presented by: Francisco Munoz Alvarez June 1, 2015 Francisco Munoz Alvarez Oracle ACE Director 8/9/10g/11g OCP, RAC OCE,

More information

Ubuntu - How to Create Software RAID 1 in Ubuntu Linux - Tutorial

Ubuntu - How to Create Software RAID 1 in Ubuntu Linux - Tutorial Published on http://www.itswapshop.com (http://www.itswapshop.com) Home > Ubuntu - How to Create Software RAID 1 in 12.04 Ubuntu Linux - Tutorial Ubuntu - How to Create Software RAID 1 in 12.04 Ubuntu

More information

RELEASE NOTES. Memento. Memento 6.2. EURESYS s.a Document version built on

RELEASE NOTES. Memento. Memento 6.2. EURESYS s.a Document version built on RELEASE NOTES Memento Memento 6.2 EURESYS s.a. 2017 - Document version 6.2.615 built on 2017-01-27 EURESYS s.a. shall retain all property rights, title and interest of the documentation of the hardware

More information

UEFI updates, Secure firmware and Secure Services on Arm

UEFI updates, Secure firmware and Secure Services on Arm presented by UEFI updates, Secure firmware and Secure Services on Arm Spring 2018 UEFI Seminar and Plugfest March 26-30, 2018 Presented by Dong Wei & Matteo Carlini (Arm) Agenda UEFI and SBBR/EBBR Updates

More information

McAfee Endpoint Security Threat Prevention Installation Guide - Linux

McAfee Endpoint Security Threat Prevention Installation Guide - Linux McAfee Endpoint Security 10.5.1 - Threat Prevention Installation Guide - Linux COPYRIGHT Copyright 2018 McAfee, LLC TRADEMARK ATTRIBUTIONS McAfee and the McAfee logo, McAfee Active Protection, epolicy

More information

Deployment Guide. SUSE Linux Enterprise Desktop 12 SP3

Deployment Guide. SUSE Linux Enterprise Desktop 12 SP3 Deployment Guide SUSE Linux Enterprise Desktop 12 SP3 Deployment Guide SUSE Linux Enterprise Desktop 12 SP3 Shows how to install single or multiple systems and how to exploit the product in- herent capabilities

More information

Security for the Xen Hypervisor Status Quo & Perspective 2006

Security for the Xen Hypervisor Status Quo & Perspective 2006 Security for the Xen Hypervisor Status Quo & Perspective 2006 Reiner Sailer Xen Summit 2006 IBM T J Watson Research Center 1/17/2006 1. Access Control Module 2. Virtual Trusted Platform Module 2 IBM T

More information

UTILIZING A BIG.LITTLE TM SOLUTION IN AUTOMOTIVE

UTILIZING A BIG.LITTLE TM SOLUTION IN AUTOMOTIVE UTILIZING A BIG.LITTLE TM SOLUTION IN AUTOMOTIVE JUN. 20, 2018 YOSHIYUKI ITO AUTOMOTIVE INFORMATION SOLUTION BUSINESS DIVISION RENESAS ELECTRONICS CORPORATION Today s Topics & Goal Requirement for big.little

More information

Nested Virtualization Update From Intel. Xiantao Zhang, Eddie Dong Intel Corporation

Nested Virtualization Update From Intel. Xiantao Zhang, Eddie Dong Intel Corporation Nested Virtualization Update From Intel Xiantao Zhang, Eddie Dong Intel Corporation Legal Disclaimer INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION WITH INTEL PRODUCTS. NO LICENSE, EXPRESS OR IMPLIED,

More information

Verified Boot: Surviving in the Internet of Insecure Things. Randall Spangler Chrome OS Firmware Lead

Verified Boot: Surviving in the Internet of Insecure Things. Randall Spangler Chrome OS Firmware Lead Verified Boot: Surviving in the Internet of Insecure Things Randall Spangler Chrome OS Firmware Lead Introduction Who am I? Chrome OS firmware engineer since 2009 Co-architect of the Chrome OS verified

More information

ECE 471 Embedded Systems Lecture 16

ECE 471 Embedded Systems Lecture 16 ECE 471 Embedded Systems Lecture 16 Vince Weaver http://web.eece.maine.edu/~vweaver vincent.weaver@maine.edu 6 October 2017 Midterm will be graded Don t forget HW#5 Announcements MEMSYS wrapup. Academia,

More information

Perl Install Module Windows Xp From Cd Boot

Perl Install Module Windows Xp From Cd Boot Perl Install Module Windows Xp From Cd Boot How To Make a Bootable USB, CD or DVD to Install Windows Using an ISO File CDs of Windows, you will only be able to do that with Windows Vista or XP. Note 2

More information

Surviving in the wilderness integrity protection and system update. Patrick Ohly, Intel Open Source Technology Center Preliminary version

Surviving in the wilderness integrity protection and system update. Patrick Ohly, Intel Open Source Technology Center Preliminary version Surviving in the wilderness integrity protection and system update Patrick Ohly, Intel Open Source Technology Center Preliminary version Motivation for the talk Why bother? Why yet another talk? What s

More information

Multi-tenancy Virtualization Challenges & Solutions. Daniel J Walsh Mr SELinux, Red Hat Date

Multi-tenancy Virtualization Challenges & Solutions. Daniel J Walsh Mr SELinux, Red Hat Date Multi-tenancy Virtualization Challenges & Solutions Daniel J Walsh Mr SELinux, Red Hat Date 06.28.12 What is Cloud? What is IaaS? IaaS = Infrastructure-as-a-Service What is PaaS? PaaS = Platform-as-a-Service

More information

Thwarting unknown bugs: hardening features in the mainline Linux kernel

Thwarting unknown bugs: hardening features in the mainline Linux kernel Thwarting unknown bugs: hardening features in the mainline Linux kernel Mark Rutland ARM Ltd Embedded Linux Conference Europe 2016 October 11, 2016 ARM 2016 2 ARM 2016 What s the

More information

Intel Virtual RAID on CPU (Intel VROC) and Intel Rapid Storage Technology Enterprise (Intel RSTe) Linux* OS 5.4 PV Version Release

Intel Virtual RAID on CPU (Intel VROC) and Intel Rapid Storage Technology Enterprise (Intel RSTe) Linux* OS 5.4 PV Version Release Intel Virtual RAID on CPU (Intel VROC) and Intel Rapid Storage Technology Enterprise (Intel RSTe) Linux* OS 5.4 PV Release Release Notes March 2018 PV Release 1.0 By using this document, in addition to

More information

Arch Linux Grub You Need To Load The Kernel First

Arch Linux Grub You Need To Load The Kernel First Arch Linux Grub You Need To Load The Kernel First Preface. A bootloader is the first software program that runs when a computer starts. It is responsible for loading and transferring control to the Linux

More information

Manufacturing Tools in the UEFI Secure Boot Environment

Manufacturing Tools in the UEFI Secure Boot Environment Manufacturing Tools in the UEFI Secure Boot Environment Presented by Stefano Righi presented by UEFI Plugfest May 2014 Agenda Introduction Transition of Manufacturing Tools to UEFI Manufacturing Tools

More information