{"id":99320,"date":"2021-03-03T16:22:39","date_gmt":"2021-03-03T14:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/trudnoustranimye-uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot"},"modified":"2021-03-03T16:22:39","modified_gmt":"2021-03-03T14:22:39","slug":"trudnoustranimye-uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/trudnoustranimye-uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","title":{"rendered":"Obt\u00ed\u017en\u011b odstraniteln\u00e9 zranitelnosti v GRUB2, kter\u00e9 umo\u017e\u0148uj\u00ed obej\u00edt UEFI Secure Boot.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Byly odhaleny informace o 8 zranitelnostech v bootloaderu GRUB2, kter\u00e9 umo\u017e\u0148uj\u00ed obch\u00e1zet mechanismus UEFI Secure Boot a spustit neov\u011b\u0159en\u00fd k\u00f3d, nap\u0159\u00edklad zav\u00e9st malware pracuj\u00edc\u00ed na \u00farovni bootloaderu nebo j\u00e1dra.      <\/p>\n<p>P\u0159ipom\u00edn\u00e1me, \u017ee ve v\u011bt\u0161in\u011b linuxov\u00fdch distribuc\u00ed se pro ov\u011b\u0159en\u00e9 spu\u0161t\u011bn\u00ed v re\u017eimu UEFI Secure Boot pou\u017e\u00edv\u00e1 mal\u00e1 vrstva shim, ov\u011b\u0159en\u00e1 digit\u00e1ln\u00edm podpisem spole\u010dnosti Microsoft. Tato vrstva ov\u011b\u0159uje GRUB2 vlastn\u00edm certifik\u00e1tem, co\u017e umo\u017e\u0148uje v\u00fdvoj\u00e1\u0159\u016fm distribuc\u00ed neov\u011b\u0159ovat ka\u017edou aktualizaci j\u00e1dra a GRUB u Microsoftu. Zranitelnosti v GRUB2 umo\u017e\u0148uj\u00ed prov\u00e1d\u011bn\u00ed vlastn\u00edho k\u00f3du v f\u00e1zi po \u00fasp\u011b\u0161n\u00e9m ov\u011b\u0159en\u00ed shim, ale p\u0159ed na\u010dten\u00edm opera\u010dn\u00edho syst\u00e9mu, a t\u00edm se vm\u011b\u0161uj\u00ed do \u0159et\u011bzce d\u016fv\u011bry v aktivn\u00edm re\u017eimu Secure Boot a z\u00edsk\u00e1vaj\u00ed plnou kontrolu nad dal\u0161\u00edm procesem na\u010d\u00edt\u00e1n\u00ed, v\u010detn\u011b na\u010d\u00edt\u00e1n\u00ed jin\u00e9ho OS, modifikace komponent opera\u010dn\u00edho syst\u00e9mu a obch\u00e1zen\u00ed ochrany Lockdown.     <\/p>\n<p>Stejn\u011b jako v p\u0159\u00edpad\u011b lo\u0148sk\u00e9 zranitelnosti BootHole, pouh\u00e9 aktualizace bootloaderu nesta\u010d\u00ed k zablokov\u00e1n\u00ed probl\u00e9mu, proto\u017ee \u00fato\u010dn\u00edk, bez ohledu na pou\u017e\u00edvan\u00fd opera\u010dn\u00ed syst\u00e9m, m\u016f\u017ee pro kompromitaci UEFI Secure Boot pou\u017e\u00edt spou\u0161t\u011bc\u00ed m\u00e9dium se starou zranitelnou verz\u00ed GRUB2, ov\u011b\u0159enou digit\u00e1ln\u00edm podpisem. Probl\u00e9m lze vy\u0159e\u0161it pouze aktualizac\u00ed seznamu odvolan\u00fdch certifik\u00e1t\u016f (dbx, UEFI Revocation List), ale v tomto p\u0159\u00edpad\u011b dojde ke ztr\u00e1t\u011b mo\u017enosti pou\u017e\u00edvat star\u00e1 instala\u010dn\u00ed m\u00e9dia s Linuxem.         <\/p>\n<p>Na syst\u00e9mech s firmwary, v nich\u017e byl aktualizov\u00e1n seznam odvolan\u00fdch certifik\u00e1t\u016f, bude mo\u017en\u00e9 v re\u017eimu UEFI Secure Boot spustit pouze aktualizovan\u00e9 verze linuxov\u00fdch distribuc\u00ed. Distribuc\u00edm bude vy\u017eadov\u00e1no aktualizovat instal\u00e1tory, bootloadery, bal\u00ed\u010dky s j\u00e1dry, fwupd firmwary a shim vrstvu, p\u0159i\u010dem\u017e pro n\u011b budou vygenerov\u00e1ny nov\u00e9 digit\u00e1ln\u00ed podpisy. U\u017eivatel\u00e9 budou muset aktualizovat instala\u010dn\u00ed obrazy a dal\u0161\u00ed spou\u0161t\u011bc\u00ed m\u00e9dia, stejn\u011b jako na\u010d\u00edst seznam odvolan\u00fdch certifik\u00e1t\u016f (dbx) do firmwaru UEFI. Do aktualizace dbx v UEFI z\u016fst\u00e1v\u00e1 syst\u00e9m zraniteln\u00fd bez ohledu na to, zda jsou v OS nainstalov\u00e1ny aktualizace. Stav odstran\u011bn\u00ed zranitelnost\u00ed lze hodnotit na n\u00e1sleduj\u00edc\u00edch str\u00e1nk\u00e1ch: Ubuntu, SUSE, RHEL, Debian.    <\/p>\n<p>K \u0159e\u0161en\u00ed probl\u00e9m\u016f spojen\u00fdch s distribuc\u00ed odvolan\u00fdch certifik\u00e1t\u016f se v budoucnu pl\u00e1nuje vyu\u017eit\u00ed mechanismu SBAT (UEFI Secure Boot Advanced Targeting), jeho\u017e podpora byla implementov\u00e1na pro GRUB2, shim a fwupd, a od n\u00e1sleduj\u00edc\u00edch aktualizac\u00ed bude pou\u017e\u00edv\u00e1na m\u00edsto funkcionality poskytovan\u00e9 bal\u00ed\u010dkem dbxtool. SBAT byl vyvinut ve spolupr\u00e1ci se spole\u010dnost\u00ed Microsoft a p\u0159edpokl\u00e1d\u00e1 p\u0159id\u00e1n\u00ed nov\u00fdch metadat do spustiteln\u00fdch soubor\u016f UEFI komponent, kter\u00e1 obsahuj\u00ed informace o v\u00fdrobci, produktu, komponent\u011b a verzi. Uveden\u00e1 metadata jsou podeps\u00e1na digit\u00e1ln\u00edm podpisem a mohou b\u00fdt d\u00e1le zahrnuta do seznam\u016f povolen\u00fdch nebo zak\u00e1zan\u00fdch komponent pro UEFI Secure Boot. Takto SBAT umo\u017en\u00ed manipulovat s \u010d\u00edsly verz\u00ed komponent po jejich odvol\u00e1n\u00ed, ani\u017e by bylo nutn\u00e9 regenerovat kl\u00ed\u010de pro Secure Boot a vytv\u00e1\u0159et nov\u00e9 podpisy pro j\u00e1dro, shim, grub2 a fwupd.             <\/p>\n<p>Zji\u0161t\u011bn\u00e9 zranitelnosti:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2020-14372 \u2013 pomoc\u00ed p\u0159\u00edkazu acpi v GRUB2 m\u016f\u017ee privilegovan\u00fd u\u017eivatel m\u00edstn\u00edho syst\u00e9mu na\u010d\u00edst modifikovan\u00e9 tabulky ACPI um\u00edst\u011bn\u00edm SSDT (Secondary System Description Table) do adres\u00e1\u0159e \/boot\/efi a zm\u011bnou nastaven\u00ed v grub.cfg. I kdy\u017e je re\u017eim Secure Boot aktivn\u00ed, navrhovan\u00fd SSDT bude proveden j\u00e1drem a m\u016f\u017ee b\u00fdt pou\u017eit k vypnut\u00ed ochrany LockDown, kter\u00e1 blokuje obejit\u00ed UEFI Secure Boot. V\u00fdsledkem je, \u017ee \u00fato\u010dn\u00edk m\u016f\u017ee na\u010d\u00edst sv\u016fj modul j\u00e1dra nebo spustit k\u00f3d prost\u0159ednictv\u00edm mechanismu kexec, ani\u017e by byla ov\u011b\u0159ena digit\u00e1ln\u00ed podpis.\n<li class=\"l\"> CVE-2020-25632 \u2013 p\u0159\u00edstup k ji\u017e uvoln\u011bn\u00e9 oblasti pam\u011bti (use-after-free) v implementaci p\u0159\u00edkazu rmmod, kter\u00fd se projevuje p\u0159i pokusu o odlo\u017een\u00ed jak\u00e9hokoli modulu bez ohledu na jeho z\u00e1vislosti. Zranitelnost nebr\u00e1n\u00ed vytvo\u0159en\u00ed exploitu, kter\u00fd m\u016f\u017ee v\u00e9st k proveden\u00ed k\u00f3du obch\u00e1zej\u00edc\u00edho verifikaci Secure Boot.\n<li class=\"l\"> CVE-2020-25647 \u2013 z\u00e1pis za hranice bufferu v funkci grub_usb_device_initialize(), kter\u00e1 se vol\u00e1 p\u0159i inicializaci USB za\u0159\u00edzen\u00ed. Probl\u00e9m m\u016f\u017ee b\u00fdt zneu\u017eit p\u0159ipojen\u00edm speci\u00e1ln\u011b p\u0159ipraven\u00e9ho USB za\u0159\u00edzen\u00ed, kter\u00e9 ud\u00e1v\u00e1 parametry, jejich\u017e velikost neodpov\u00edd\u00e1 velikosti bufferu vyhrazen\u00e9mu pro struktury USB. \u00dato\u010dn\u00edk m\u016f\u017ee dos\u00e1hnout proveden\u00ed k\u00f3du, kter\u00fd nen\u00ed ov\u011b\u0159en v Secure Boot, prost\u0159ednictv\u00edm manipulace s USB za\u0159\u00edzen\u00edmi.\n<li class=\"l\"> CVE-2020-27749 \u2013 p\u0159ete\u010den\u00ed bufferu ve funkci grub_parser_split_cmdline(), kter\u00e9 m\u016f\u017ee b\u00fdt vyvol\u00e1no uveden\u00edm prom\u011bnn\u00fdch v p\u0159\u00edkazov\u00e9m \u0159\u00e1dku GRUB2 v\u011bt\u0161\u00edch ne\u017e 1 KB. Zranitelnost umo\u017e\u0148uje prov\u00e9st k\u00f3d obch\u00e1zej\u00edc\u00ed Secure Boot.\n<li class=\"l\"> CVE-2020-27779 \u2013 p\u0159\u00edkaz cutmem umo\u017e\u0148uje \u00fato\u010dn\u00edkovi odstranit rozsah adres z pam\u011bti, aby obe\u0161el Secure Boot.\n<li class=\"l\"> CVE-2021-3418 \u2013 zm\u011bny v shim_lock vytvo\u0159ily dodate\u010dn\u00fd vektor pro zneu\u017eit\u00ed lo\u0148sk\u00e9 zranitelnosti CVE-2020-15705. P\u0159i instalaci certifik\u00e1tu do dbx, kter\u00fd byl pou\u017eit pro podepisov\u00e1n\u00ed GRUB2, GRUB2 umo\u017enil na\u010d\u00edst jak\u00e9koli j\u00e1dro p\u0159\u00edmo bez ov\u011b\u0159en\u00ed podpisu.\n<li class=\"l\"> CVE-2021-20225 \u2013 mo\u017enost z\u00e1pisu dat za hranice bufferu p\u0159i spu\u0161t\u011bn\u00ed p\u0159\u00edkaz\u016f s velmi velk\u00fdm po\u010dtem mo\u017enost\u00ed.\n<li class=\"l\"> CVE-2021-20233 \u2013 mo\u017enost z\u00e1pisu dat za hranice bufferu v d\u016fsledku nespr\u00e1vn\u00e9ho v\u00fdpo\u010dtu velikosti bufferu p\u0159i pou\u017eit\u00ed uvozovek. P\u0159i v\u00fdpo\u010dtu velikosti se p\u0159edpokl\u00e1dalo, \u017ee pro escapov\u00e1n\u00ed jednoduch\u00e9 uvozovky jsou pot\u0159eba t\u0159i znaky, i kdy\u017e ve skute\u010dnosti jsou zapot\u0159eb\u00ed \u010dty\u0159i.    <\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54691\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0438\u043b\u0438 \u044f\u0434\u0440\u0430. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 Linux-\u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0434\u043b\u044f \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 UEFI Secure Boot \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0430\u044f \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0430 shim, \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u043d\u0430\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e Microsoft. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 GRUB2 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99320","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/trudnoustranimye-uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0422\u0440\u0443\u0434\u043d\u043e\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/trudnoustranimye-uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-03-03T14:22:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-03-03T14:22:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Obt\u00ed\u017en\u011b odstraniteln\u00e1 zranitelnost v GRUB2, umo\u017e\u0148uj\u00edc\u00ed obch\u00e1zen\u00ed UEFI Secure Boot | ProHoster","description":"Byly odhaleny informace o 8 zranitelnostech v bootloaderu GRUB2, kter\u00e9 umo\u017e\u0148uj\u00ed obej\u00edt mechanismus UEFI Secure Boot a zajistit spu\u0161t\u011bn\u00ed neov\u011b\u0159en\u00e9ho k\u00f3du, nap\u0159\u00edklad prov\u00e9st nasazen\u00ed malwaru, kter\u00fd b\u011b\u017e\u00ed na \u00farovni.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/trudnoustranimye-uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0422\u0440\u0443\u0434\u043d\u043e\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/trudnoustranimye-uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-03-03T14:22:39+00:00","article:modified_time":"2021-03-03T14:22:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99320","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-03 14:35:57","updated":"2022-09-28 06:13:58","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99320","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=99320"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99320\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=99320"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=99320"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=99320"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}