［转载］微软Windows 8利用UEFI进一步限制Linux生存空间

"Windows 8认证品牌机可能不支持启动Linux。"根据新的规定，Windows 8认证的机器可能将阻止部署Linux。Win 8要求机器用统一可扩展固件接口（UEFI）代替BIOS。EFI正逐渐取代长期使用的BIOS固件，它兼容Windows，支持全局唯一标识分区表 （GUID Partition Table），OS X/Intel和Linux 2.6。EFI和UEFI 规格对Linux来说没什么问题，但问题是微软要求win8认证客户机支持安全启动，启动进程内的所有固件和软件都需要可信CA签名，显然微软试图锁定启动进程，阻止安装无签名的第三方系统如Linux。

• Current issues with boot
  • Growing class of malware targets the boot path
  • Often the only fix is to reinstall the operating system
• UEFI and secure boot harden the boot process
  • All firmware and software in the boot process must be signed by a trusted Certificate Authority (CA)
  • Required for Windows 8 client [emphasis mine]
  • Does not require a Trusted Platform Module (TPM)
  • Reduces the likelihood of bootkits, rootkits and ransomware

参考文献：http://www.cnbeta.com/articles/155905.htm