MX Linux Forum

Would a linux system with secure boot enabled, prevent being able to "Chroot Rescure Scan" and change a user password - relevant query: viewtopic.php?p=816845#p816845 - and steal Uncle Jack's life savings?

Thanks

MXRobo wrote: Sat Apr 19, 2025 12:59 pm Would a linux system with secure boot enabled, prevent being able to "Chroot Rescure Scan" and change a user password - relevant query: viewtopic.php?p=816845#p816845 - and steal Uncle Jack's life savings?

Thanks

No.
Because SecureBoot is about sb-protecting the booloader-chain from UEFI-firmware down to the kernel and kernel-modules.
I's not about protecting the filesystem content.

How to verify: Boot with latest MX-23.6*.iso (non-AHS), which comes with Debian's signed kernel,
after having enabled SecureBoot within the UEFI-firmware. Now Open "Chroot Rescue Scan" and visit any detectable installed Linux.
And "fix" or adjust the visited systems to your liking. Should work with Ubuntu or Debian based systems or similar. Probaly also with Manjaro
or Fedora type of systems.

MXRobo wrote: Sat Apr 19, 2025 12:59 pm Would a linux system with secure boot enabled, prevent being able to "Chroot Rescure Scan" and change a user password - relevant query: viewtopic.php?p=816845#p816845 - and steal Uncle Jack's life savings?

Thanks

What you could do.. is to use veracrypt - either with a vault for your important information, or encrypt the entire disk.

This will stop any security issue cold.

Briefly, Thank you both @fehlix and @CharlesV for taking the time to reply just to satisfy my curiosity – I did post in chat.

Uncle Jack says, "encryption good", but until encrypted, will -