{"id":119554,"date":"2024-08-21T09:43:00","date_gmt":"2024-08-21T07:43:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/oshibka-v-obnovlenii-k-windows-blokirovala-zagruzku-linux-pri-ispolzovanii-uefi-secure-boot"},"modified":"2024-08-21T09:43:00","modified_gmt":"2024-08-21T07:43:00","slug":"oshibka-v-obnovlenii-k-windows-blokirovala-zagruzku-linux-pri-ispolzovanii-uefi-secure-boot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/oshibka-v-obnovlenii-k-windows-blokirovala-zagruzku-linux-pri-ispolzovanii-uefi-secure-boot","title":{"rendered":"Windowsi uuendus t\u00f5i kaasa probleemi, mis takistab Linuxi k\u00e4ivitamist UEFI Secure Booti kasutamisel","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Teisip\u00e4eval v\u00e4lja antud Microsofti Windowsi uuenduses avastati probleem, mis takistab Linuxi s\u00fcsteemide k\u00e4ivitamist, mis on installitud samasse arvutisse koos Windowsiga. Probleemi p\u00f5hjustas paranduse rakendamine, mille eesm\u00e4rk oli k\u00f5rvaldada vana haavatavus (CVE-2022-2601) GRUB alglaadurist, mis parandati 2022. aastal. Microsoft pole seni v\u00e4lja andnud mitte \u00fchtegi avaldust v\u00f5i kommentaari seoses tekkinud t\u00f5rkega. <\/p>\n

M\u00e4rkusel muudatusele \u00f6eldi, et uue SBAT (UEFI Secure Boot Advanced Targeting) poliitika kehtestamise parandust rakendatakse ainult Windowsi s\u00fcsteemides ja see ei m\u00f5juta kaheastmeliste konfiguratsioonide toimimist (muudatus takistas vanade GRUB-i k\u00e4ivituspiltide kasutamist Secure Boot'i \u00fcmbersuunamiseks s\u00fcsteemides, kus on installitud ainult Windows). Samuti m\u00e4rgiti, et muudatus v\u00f5ib p\u00f5hjustada probleeme iso-piltide laadimisel vanadest s\u00fcsteemidest, millel on haavatav GRUB-i versioon. Tegelikult kuup\u00e4eva j\u00e4rgi esines probleeme ka kaheastmeliste s\u00fcsteemide kasutajatel, kes kasutasid uusi Linuxi jaotusi, nagu Ubuntu 24.04 ja Debian 12.6, milles GRUB-i haavatavus on juba ammu parandatud. <\/p>\n

Probleem avaldub laadimisprotsessi peatumisena, millega kaasneb s\u00f5num \u201eVerifying shim SBAT data failed: Security Policy Violation. Something has gone seriously wrong: SBAT self-check failed: Security Policy Violation\u201d. T\u00f6\u00f6 taastamiseks soovitatakse eemaldada UEFI-sse installitud SBAT andmed, selleks v\u00f5ib v\u00e4lja l\u00fclitada Secure Boot BIOS-is, laadida v\u00e4rske UEFI Secure Boot toetava Linuxi distributsiooni, n\u00e4iteks Ubuntu, ning k\u00e4ivitada terminalis k\u00e4sk \u201emokutil --set-sbat-policy delete\u201d, mille j\u00e4rel tuleb Linuxi distributsioon uuesti k\u00e4ivitada, et rakendada \u00f5ige SBAT poliitika. Seej\u00e4rel saab Secure Boot BIOS-is taastada. <\/p>\n

SBAT mehhanism loodi Red Hat koost\u00f6\u00f6s Microsoftiga, et blokeerida haavatavusi GRUB-i laadimisprogrammis ja shim-kihis digitaalse allkirja t\u00fchistamiseta. SBAT t\u00e4histab UEFI komponentide t\u00e4ideviija failidesse lisatud metainfot, mis sisaldab tootja, toote, komponendi ja versiooni teavet. Need metainfod on digitaalselt allkirjastatud ja neid saab eraldi lisada UEFI Secure Boot'i lubatud v\u00f5i keelatud komponentide nimekirjadesse. SBAT v\u00f5imaldab blokeerida digitaalse allkirja kasutamist \u00fcksikute versioonide numbrite jaoks, ilma et oleks vaja t\u00fchistada Secure Boot jaoks m\u00f5eldud v\u00f5tmeid. <\/p>\n

SBAT kaudu haavatavuste blokeerimine ei n\u00f5ua UEFI tagasiv\u00f5etud sertifikaatide nimekirja (dbx) kasutamist, vaid toimub sisesalajase v\u00f5tme asendamise tasemel allkirjade ja GRUB2, shim ja teiste tarnitud distributsioonide k\u00e4ivitamisartefaktide uuendamise jaoks. Enne SBATi rakendamist oli tagasiv\u00f5etud sertifikaatide nimekirja (dbx, UEFI tagasiv\u00f5tmise nimekiri) uuendamine t\u00e4ieliku haavatavuse blokeerimise kohustuslik tingimus, kuna r\u00fcndaja, olenemata kasutatavast operatsioonis\u00fcsteemist, v\u00f5is UEFI Secure Booti kompromiteerimiseks kasutada vanemat haavatavat GRUB2 versiooni, mille digitaalne allkiri on kinnitatud.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Microsoft \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043a \u041e\u0421 Windows \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Linux-\u0441\u0438\u0441\u0442\u0435\u043c, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u0441 Windows. \u041f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-2601) \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 2022 \u0433\u043e\u0434\u0443. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u0432\u043e\u0437\u043d\u0438\u043a\u0448\u0438\u043c \u0441\u0431\u043e\u0435\u043c \u0438 \u043d\u0438\u043a\u0430\u043a \u0435\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119554","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Windowsi uuendamise viga t\u00f5kestas Linuxi laadimise UEFI Secure Booti kasutamisel | ProHoster","description":"Teisip\u00e4eval Microsofti poolt v\u00e4lja antud v\u00e4rskenduses Windowsi ops\u00fcsteemile tuvastati probleem, mis p\u00f5hjustab Linuxi s\u00fcsteemide t\u00f5rke, mis on installitud samasse arvutisse koos Windowsiga. Probleemide p\u00f5hjuseks on parandamine, mis on suunatud vana haavatavuse (CVE-2022-2601) k\u00f5rvaldamisele GRUBi laadijas, mis parandus tehti 2022. aastal. Microsoft ei ole veel avaldanud \u00fchtegi avaldust seoses tekkinud rikke ja sellega ei ole toimunud mingeid muudatusi.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/oshibka-v-obnovlenii-k-windows-blokirovala-zagruzku-linux-pri-ispolzovanii-uefi-secure-boot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043a Windows \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 Linux \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 UEFI Secure Boot | ProHoster","og:description":"\u0412 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Microsoft \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043a \u041e\u0421 Windows \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Linux-\u0441\u0438\u0441\u0442\u0435\u043c, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u0441 Windows. \u041f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-2601) \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 2022 \u0433\u043e\u0434\u0443. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u0432\u043e\u0437\u043d\u0438\u043a\u0448\u0438\u043c \u0441\u0431\u043e\u0435\u043c \u0438 \u043d\u0438\u043a\u0430\u043a \u0435\u0433\u043e","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/oshibka-v-obnovlenii-k-windows-blokirovala-zagruzku-linux-pri-ispolzovanii-uefi-secure-boot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-08-21T07:43:00+00:00","article:modified_time":"2024-08-21T07:43:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119554","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 06:03:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:03:19","updated":"2026-01-23 06:03:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119554","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=119554"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119554\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=119554"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=119554"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=119554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}