r/linux • • 22h ago

Popular Application Fortnite is coming to Linux

Post image
3.1k Upvotes

1.3k comments sorted by

View all comments

90

u/New_Alps_5655 22h ago

Would a self signed Gentoo kernel with keys enrolled in TPM also work? Not that I'm ever going to play fortnite, just curious.

94

u/Keelock 21h ago edited 21h ago

No, the cryptographic chain of trust starts with a root key they trust, and a self signed cert doesn't prove the kernel isn't enabling cheats, it just tells your motherboard TPM you trust it, which lets it boot.

2

u/[deleted] 21h ago

[deleted]

14

u/merb 21h ago

Kexec needs to be off. Also when you are kexec into a signed kernel you would still not gained anything

10

u/LFP-Throwaway-3982 21h ago

Requires kexec to be disabled, nice try.

73

u/carsncode 21h ago

When they say "signed by a trusted distro" they mean trusted by them. They don't care if it's trusted by you.

-3

u/Indolent_Bard 12h ago

Well yeah, why the fuck would they trust you? "Never trust the client" after all. If trusted by you was the baseline it'd be way to easy to cheat, is that fair? Are you entitled to be able to cheat more easily?

5

u/temporary_legging 18h ago

Judging by the 'signed by a trusted distro' bullet point, probably not. They will almost certainly check against a hardcoded whitelist of vendor signing keys rather than trusting locally enrolled MOKs.

3

u/GarbledEntrails 18h ago

nope definitely not

1

u/shadedmagus 21h ago

That's a good question. Since my post was originally communicating details given by the screenshot, I'm just leaving it here as I'm not sure. Feel free to downvote.

-20

u/Ok_Instruction_3789 20h ago

So you want to build your own kernel with your own cheats built in and signed by you so it is legit so you can cheat in fornite is what your asking?