Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230
Gnome Feature / Device Security feature GuideDevice Security comes with Gnome 43. Thats an awesome feature. It would ver
Gnome Feature / Device Security feature GuideDevice Security comes with Gnome 43. Thats an awesome feature. It would ver
Device Security comes with Gnome 43. Thats an awesome feature.
It would very helpful if it was a guide helping you secure the system.
Is there any out there?Post them here and let create a guide.
1. Level 1
* Intel Managemenent Engine Version
* UEFI Platform Key
* TPM v2.0
*You can enable it on your BIOS on Boot settings.*
* Firmware BIOS Region
* Firmware Writ Protection Lock
* Platform Debugging
* Intel Management Engine Manufacturing Mode
* UEFI Secure Boot
* Firmware Write Protection
* Intel Management Engine Override
* TPM Platform Configuration
2. Level 2
* Intel BootGuard Fuse
* Intel BootGuard Verified Boot
* Intel BootGuard Protected
* Intel BootGuard
* TPM Reconstruction
* IOMMU Protection
* Platform Debugging
3. Level 3
* Suspend To RAM
* Intel BootGuard Error Policy
* Pre-boot DMA Protection
* Intel CET Enabled
* Suspend To Idle
* Encrypted RAM
* Intel SMAP
It would very helpful if it was a guide helping you secure the system.
Is there any out there?Post them here and let create a guide.
1. Level 1
* Intel Managemenent Engine Version
* UEFI Platform Key
* TPM v2.0
*You can enable it on your BIOS on Boot settings.*
* Firmware BIOS Region
* Firmware Writ Protection Lock
* Platform Debugging
* Intel Management Engine Manufacturing Mode
* UEFI Secure Boot
* Firmware Write Protection
* Intel Management Engine Override
* TPM Platform Configuration
2. Level 2
* Intel BootGuard Fuse
* Intel BootGuard Verified Boot
* Intel BootGuard Protected
* Intel BootGuard
* TPM Reconstruction
* IOMMU Protection
* Platform Debugging
3. Level 3
* Suspend To RAM
* Intel BootGuard Error Policy
* Pre-boot DMA Protection
* Intel CET Enabled
* Suspend To Idle
* Encrypted RAM
* Intel SMAP
- sunrat
- Administrator
- Posts: 6513
- Joined: 2006-08-29 09:12
- Location: Melbourne, Australia
- Has thanked: 119 times
- Been thanked: 489 times
Re: Gnome Feature / Device Security feature GuideDevice Security comes with Gnome 43. Thats an awesome feature. It would
I'm sure there a many on the internet.
“ computer users can be divided into 2 categories:
Those who have lost data
...and those who have not lost data YET ” Remember to BACKUP!
Those who have lost data
...and those who have not lost data YET ” Remember to BACKUP!
- Head_on_a_Stick
- Posts: 14114
- Joined: 2014-06-01 17:46
- Location: London, England
- Has thanked: 81 times
- Been thanked: 133 times
Re: Gnome Feature / Device Security feature GuideDevice Security comes with Gnome 43. Thats an awesome feature. It would
You don't need GNOME to tell you if SecureBoot is enabled:
Or
Code: Select all
# bootctl status
Code: Select all
mokutil --sb-state
deadbang
Re: Gnome Feature / Device Security feature GuideDevice Security comes with Gnome 43. Thats an awesome feature. It would
Im totally noob on this. Im looking for ways to make them secure and create a guide for newcomers like me.
- Head_on_a_Stick
- Posts: 14114
- Joined: 2014-06-01 17:46
- Location: London, England
- Has thanked: 81 times
- Been thanked: 133 times
Re: Gnome Feature / Device Security feature GuideDevice Security comes with Gnome 43. Thats an awesome feature. It would
The stable release should use SecureBoot automatically, no need for a guide. EDIT: newer machines may need 3rd party certificates authorised from the firmware ("BIOS") menus.
Version 43 of GNOME might make it into Debian 12 when it is released so you should see the feature there, hopefully.
Version 43 of GNOME might make it into Debian 12 when it is released so you should see the feature there, hopefully.
deadbang
Re: Gnome Feature / Device Security feature GuideDevice Security comes with Gnome 43. Thats an awesome feature. It would
I really hope so. Seems a very nice feature to have. Im really noob on this so thats why i created this post.
Im actually using testing thats why i saw it.
Im actually using testing thats why i saw it.
Re: Gnome Feature / Device Security feature GuideDevice Security comes with Gnome 43. Thats an awesome feature. It would
If the new Gnome security feature does anything other than
then I suggest its output can be safely ignored.!!! Warning !!! Intel hardware rootkit IME/ME detected on your system! Replace your hardware as soon as possible with a freedom respecting solution. Recommendations:
<list of liberated hardware>
- fabien
- Forum Helper
- Posts: 690
- Joined: 2019-12-03 12:51
- Location: Anarres (Toulouse, France actually)
- Has thanked: 62 times
- Been thanked: 161 times
Re: Gnome Feature / Device Security feature GuideDevice Security comes with Gnome 43. Thats an awesome feature. It would
Worrisome, but what is your hardware?
https://en.wikipedia.org/wiki/Intel_Management_Engine
Intel's main competitor AMD has incorporated the equivalent AMD Secure Technology (formally called Platform Security Processor) in virtually all of its post-2013 CPUs.
- fabien
- Forum Helper
- Posts: 690
- Joined: 2019-12-03 12:51
- Location: Anarres (Toulouse, France actually)
- Has thanked: 62 times
- Been thanked: 161 times
Re: Gnome Feature / Device Security feature GuideDevice Security comes with Gnome 43. Thats an awesome feature. It would
I'm happy for you. So, what is the
Re: Gnome Feature / Device Security feature GuideDevice Security comes with Gnome 43. Thats an awesome feature. It would
It was just a stand-in to illustrate my point. But if I had to begin to construct such a list it might include vendors like Purism, System76, Technoethical, SciFive, Raptor Computing Systems and MiniFree.