Yes, this is what I meant
Problem is these 'slight changes' sometimes are what is wrong.
And this is not only about secure boot, but the whole UEFI infrastructure, which, as far as I know, is very complex.
Problem is these 'slight changes' sometimes are what is wrong.
And this is not only about secure boot, but the whole UEFI infrastructure, which, as far as I know, is very complex.
From Garrets linuxconf.au talk, year ago. As it is reference implementation, it is pretty much untested in the wild. So you can expect those "slight changes" to be mostly bugfixes.
Punchline is that Intel DOES provide pretty much all code for UEFI. And it is still bad.