New in GNOME: Warn users when Secure Boot is disabled

The 2022 Open Atom Global Open Source Summit is live!>>>>>

GNOME and Red Hat developers are working to integrate firmware security tips and recommendations into this desktop toWarn users about platform/firmware security issues.

According to foreign media Phoronix introduced, there is now a firmware security area within GNOME Control Center that shows whether UEFI Secure Boot is active, various security protection details such as TPM status, Intel BootGuard presence and enabled, IOMMU protection status, etc.

GNOME will display a warning image when UEFI Secure Boot is disabled:

Similarly, in the GDM Display Manager, this merge can be used to add a secure boot check and a warning notification to alert users when they log in that "the system is vulnerable".

Building on this, Red Hat's Richard Hughes on the blog, a feature that allows emulation of host profiles.This simulation support helps test the firmware security state in arbitrary configurations, such as GNOME Control Center and other scenarios.