Libreboot

Libreboot
Graphic of Canteloupe, Libreboot's mascot, which is a running deer in black and white
Two ThinkPad X60 laptops modified to use Libreboot as their firmware
Original author(s) The Libreboot project[1]
Initial release 12 December 2013 (2013-12-12)
Stable release 20160902 (September 2, 2016 (2016-09-02)) [±][2]
Repository
Edit this at Wikidata
Platform IA-32, x86-64, ARMv7[3]
Type Firmware
License GPLv3[4]
Website libreboot.org

Libreboot (formerly known as GNU Libreboot[5]) is a free software project aimed at replacing the proprietary BIOS firmware found in most computers with a libre, lightweight system designed to perform only the minimum number of tasks necessary to load and run a modern 32-bit or 64-bit operating system.

Characteristics

Libreboot is established as a distribution of coreboot without proprietary binary blobs.[6][7] Libreboot is not a straight fork of coreboot; instead, it is a parallel effort that works closely with and re-bases every so often on the latest coreboot as the upstream supplier, with patches merged upstream whenever possible. In addition to removing proprietary software, libreboot also attempts to make coreboot easy to use by automating the build and installation processes.[8][9]

The Libreboot project made possible the required modifications for completely libre variants of some ThinkPad, Chromebook, and MacBook laptops as well as desktop and server and workstation motherboards.[10][11] According to its own documentation, it can work with any Linux distribution that uses kernel mode setting (KMS) for the graphics, while Windows is not supported and its use is discouraged by Libreboot. Support for BSD is largely untested, with some successful reports while booting OpenBSD and NetBSD.[12]

History

Libreboot was launched in 2013 by Leah Rowe to make a free software version of coreboot (by removing "binary blobs" included in the coreboot source code). Since February 2015 the project has been endorsed by Free Software Foundation (FSF).[13] The project became part of the GNU Project in May 2016.[14]

In September 2016 the lead developer announced that the project would leave the GNU Project and in January 2017, Richard Stallman announced that Libreboot was released from the GNU project.[15] The reason for the dispute was allegations from the lead maintainer[16] that FSF had fired a transgender employee because the employee reported gender harassment.[17] The FSF denied these allegations the same day.[18] In April 2017, the Libreboot project removed the accusations from their website, the lead developer apologised for what happened and control of the website was transferred to another contributor.[19] Three weeks later, a proposal to re-apply to become a GNU Project was published and received very clear support.[20]

Security concerns

On May 1, 2017, Intel has confirmed and patched a remote elevation of privilege bug (CVE-2017-5689) in its Management Engine firmware,[21] a bug long suspected by members of the Coreboot and Libreboot communities.[22][23] Every Intel platform with either Intel Standard Manageability, Active Management Technology, or Small Business Technology, from Nehalem in 2008 to Kaby Lake in 2017 has a remotely exploitable security hole in the IME (Intel Management Engine).[24][25] Another security risk alleged to be inside the IME is the Intel vPro cellular radio,[26] through which hardware components can be accessed remotely, or the computer can even be killed, however there is no evidence such capability exists within the chip itself (vPro is designed to use external radio devices for the services that have provoked this rumour).[27]

Supported systems

Libreboot system support includes the following systems:[11][28][29]

  • Server boards: Asus KFSN4-DRE and Asus KGPE-D16
  • Desktop boards: Asus KCMA-D8, Intel D510MO, Gigabyte GA-G41M-ES2L, and Apple iMac 5,2
  • Laptops: Asus Chromebook C201, Lenovo ThinkPad X60, X60s and X60 Tablet, Lenovo ThinkPad T60 (models with ATI GPUs cannot be used due to non-free vBIOS), Lenovo ThinkPad X200, X200s (some exceptions) and X200 Tablet, Lenovo ThinkPad R400, Lenovo ThinkPad T400 and T400s, Lenovo ThinkPad T500, Apple MacBook 1.1, and Apple MacBook 2.1

References

  1. ↑ "Libreboot project contributors". libreboot.org. Retrieved 14 May 2016.
  2. ↑ "Libreboot release information". Libreboot. Retrieved September 2, 2016.
  3. ↑ "Coreboot ARM". coreboot. 15 October 2013. Retrieved 1 February 2014.
  4. ↑ "libreboot's COPYING file". notabug.org. Retrieved 16 September 2016.
  5. ↑ "GNU Libreboot". Retrieved 24 May 2016.
  6. ↑ "Libreboot". Free Software Foundation. Retrieved 31 July 2014.
  7. ↑ "Libreboot". Libreboot. Retrieved 31 July 2014.
  8. ↑ "About the libreboot project". Libreboot. Retrieved 25 April 2015.
  9. ↑ "Replace your proprietary BIOS with Libreboot". Free Software Foundation. 4 August 2014.
  10. ↑ Gay, Joshua (9 October 2012). "Respects Your Freedom hardware product certification". Free Software Foundation. Retrieved 25 February 2015.
  11. 1 2 "Hardware compatibility list". Libreboot. Retrieved 19 May 2016.
  12. ↑ "Answers to Frequently Asked Questions about libreboot". Libreboot.org.
  13. ↑ "Campaign for Free BIOS". 15 February 2015. Archived from the original on 15 February 2015.
  14. ↑ "Libreboot, Coreboot Downstream, Becomes A GNU Project". Phoronix. 19 May 2016. Retrieved 19 May 2016.
  15. ↑ Stallman, Richard (5 January 2017). "Goodbye to GNU Libreboot". Retrieved 5 January 2017.
  16. ↑ Zammit, Damien (18 September 2016). "Libreboot Screwup". zammit.org. Retrieved 31 October 2016. [the contributors] are not consulted about any of the views expressed on the libreboot.org website when they are hastily published by Leah Rowe.
  17. ↑ "Libreboot opposes the Free Software Foundation and GNU project". Libreboot. Archived from the original on 2016-12-08. Retrieved 2016-09-22.
  18. ↑ "Free Software Foundation statement on 2016-09-16". www.fsf.org. Retrieved 2016-09-24.
  19. ↑ Rosenzweig, Alyssa; Rowe, Leah (2017-04-02). "Open Letter to the Free Software Community". Retrieved 2017-04-24.
  20. ↑ Larabel, Michael (2017-04-22). "Libreboot Is Now Considering Whether To RE-Join The GNU". Phoronix. Retrieved 2017-04-24.
  21. ↑ Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Escalation of Privilege -Intel Security Center
  22. ↑ ‘Active Management Technology’ is Quite Likely a BackDoor, Along With Intel’s UEFI
  23. ↑ "Why is the latest Intel hardware unsupported in libreboot?". Libreboot. Retrieved May 2, 2017.
  24. ↑ Remote security exploit in all 2008+ Intel platforms
  25. ↑ Red alert! Intel patches remote execution hole that's been hidden in biz, server chips since 2008
  26. ↑ Intel vPro 3G Digital signage
  27. ↑ 'Occupy' affiliate claims Intel bakes SECRET 3G radio into vPro CPUs
  28. ↑ Larabel, Michael (28 June 2015). "Libreboot Now Supports An AMD/ASUS Motherboard". Phoronix. Retrieved 14 July 2015.
  29. ↑ Brad Linder. "Libreboot ported to Asus Chromebook C201 (free software bootloader)". Liliputing. Retrieved 15 October 2015.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.