Rules Related To 'secureboot'

Component overview

Relevant packages:

Relevant groups:

None

Changelog:

No changes recorded.

Relevant rules:

Rule details

Ensure that Secure Boot is enabled

secure_boot_enabled

Description

Ensure that Secure Boot is enabled with the mokutil command.

Rationale

By ensuring the integrity of the boot process, Secure Boot protects against rootkits, bootkits, and other low-level malware that could compromise the system before traditional defenses activate. This helps maintain both the confidentiality and integrity of the system, ensuring that sensitive data remains protected and only trusted code is executed.