this post was submitted on 11 Jul 2023
33 points (94.6% liked)
Linux
50208 readers
1102 users here now
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Technically speaking, Intel can take steps to make it easier for consumers to prevent ME from booting.
Take AMD for example. In 2027, AMD plans to publish OpenSIL, which will basically give the community keys to the initialisation of silicon (which includes AMD PSP). Of course, Intel being the POS that they are aren't going to do that
so … intel is preventing you from disabling IME …
Bit of a noob question wrt IME, but I noticed a toggle in the linux kernel configuration menu to disable IME the other day when I was compiling my first custom kernel. I understand that IME is a separate processor with separate network access that operates at or below the BIOS/UEFI level of the system. Does the linux kernel option actually do anything? And if not why is it there.
It doesn't seem like that should be able to do anything, knowing what I do know about the IME
Can't check right now, but I think the option you saw in the kernel config is for a driver to interact with the ME. Intel Management Engine has an interface called HECI for firmware and operating systems to query status and get event messages. It probably is also used to configure other stuff like AMT remote management.
This is serious (and exciting) news to me. I need to take a look, do you have any resources that talk about this? Indeed, the kernel should not be able to do anything about ME, but what do I know, Kernel developers are much smarter than I am.