Results 1 to 9 of 9

Thread: Ubuntu 16.04 - re-enable secure boot?

  1. #1
    Join Date
    Aug 2016
    Beans
    66

    Ubuntu 16.04 - re-enable secure boot?

    Hi,

    I had to disable secure boot to install a driver for my wireless card. I used this commend to disable:

    Code:
    sudo mokutil --disable-validation
    


    Now that I am done installing, do I need to re-enable the secure boot? It feels weird to see that it says "booting to insecure mode" everytime I start the computer. If so, how do I re-enable it?

    Also just for my knowledge, is it my computer at risk if I leave it in the insecure mode???

  2. #2
    Join Date
    Oct 2009
    Location
    Reykjavík, Ísland
    Beans
    13,648
    Distro
    Xubuntu

    Re: Ubuntu 16.04 - re-enable secure boot?

    Security is a huge topic. I'll only post a few notes.

    An attack coming from booting a hostile / tampered-with kernel (being Windows or Linux) is a very rare event. Other kinds of attack, say through a browser and the associated plug-ins, are much more important.

    When the Linux developers were forced to accept the 'secure' boot demands it caused wide criticism. The effect is that Microsoft now can ban a kernel from being signed if they find a security related reason, and as all kernels (being Windows or Linux) have security flaws Microsoft has the main switch in their hands. Not that they have tried using it yet.

    Enjoy the freedom that you have the option to disable the 'secure' boot option. I keep my old BIOS-running hardware without 'secure' features for as long as possible. Your operative system itself is one of the most secure ones available.

    Meanwhile keep focus on real security threats. To begin with, apply all software updates and install as few browser plug-ins as possible.
    Bringing old hardware back to life. About problems due to upgrading.
    Please visit Quick Links -> Unanswered Posts.
    Don't use this space for a list of your hardware. It only creates false hits in the search engines.

  3. #3
    Join Date
    Aug 2016
    Beans
    66

    Re: Ubuntu 16.04 - re-enable secure boot?

    Quote Originally Posted by mörgæs View Post
    Meanwhile keep focus on real security threats. To begin with, apply all software updates and install as few browser plug-ins as possible.
    Hi, I am completely new to Ubuntu and Linux in general. Please forgive my ignorance.

    When I was using Windows, I used Symantec Anti Virus with a licence from my school. It had a real-time anti-virus protection feature and it sometimes would stop virus from websites I visited on Chrome.

    I checked and my school does not have the same licence for Symantec on Ubuntu. I don't even know whether Symantec supports Ubuntu.

    Do you recommend any other anti-virus extension for Chrome on Ubuntu???? Thanks!

  4. #4
    Join Date
    Feb 2008
    Location
    Texas
    Beans
    30,014
    Distro
    Ubuntu 24.04 Noble Numbat

    Re: Ubuntu 16.04 - re-enable secure boot?

    Anti-virus really is not needed because there are not any known viruses for ubuntu at this time and if there where it could not harm ubuntu as long as you are not logged in as root and that account is disabled by default.

    The exception would be if you are sharing a lot of emails with windows computers that could be harmed by a windows virus.

    There is a ubuntu virus detector it is called clamV but it does not work very good and gives a lot of false positives.
    Last edited by wildmanne39; September 3rd, 2016 at 05:02 AM.

  5. #5
    Join Date
    Aug 2016
    Beans
    66

    Re: Ubuntu 16.04 - re-enable secure boot?

    Quote Originally Posted by Wild Man View Post
    Anti-virus really is not needed because there are not any known viruses for ubuntu at this time and if there where it could not harm ubuntu as long as you are not logged in as root and that account is disabled by default.
    Hi. Booting in insecure mode is not the same thing as logging in as root, correct? Thanks.

  6. #6
    Join Date
    Feb 2008
    Location
    Texas
    Beans
    30,014
    Distro
    Ubuntu 24.04 Noble Numbat

  7. #7
    Join Date
    Oct 2009
    Location
    Reykjavík, Ísland
    Beans
    13,648
    Distro
    Xubuntu

    Re: Ubuntu 16.04 - re-enable secure boot?

    Here's something about logging in as root:
    https://help.ubuntu.com/community/RootSudo
    Bringing old hardware back to life. About problems due to upgrading.
    Please visit Quick Links -> Unanswered Posts.
    Don't use this space for a list of your hardware. It only creates false hits in the search engines.

  8. #8
    Join Date
    May 2016
    Beans
    1

    Re: Ubuntu 16.04 - re-enable secure boot?

    I had the same issues. I reinstalled ubuntu completely and even when booting from a live usb of 16.04, I still get the booting in insecure mode. How do I re-enable secure boot?

  9. #9
    Join Date
    Feb 2008
    Location
    Texas
    Beans
    30,014
    Distro
    Ubuntu 24.04 Noble Numbat

    Re: Ubuntu 16.04 - re-enable secure boot?

    Did you sign the key for the driver that you were having issues with? if so then do:
    Code:
    sudo mokutil --enable-validation
    if you did not sign the key then the driver you disabled secure boot for will stop working.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •