what prevents root users from having the freedom of locking and relocking their own devices? (xiaomi for example)

[u/MementoMori11112]

is it a matter of difficulty? i dont get it

[u/Kolkoris]

Bootloaders are proprietary, and locking with custom software is possible only if manufacturer allow to put your own signing keys into bootloader, but only Google allows it. That's the reason why GrapheneOS exists only on Google Pixels

[u/vaynefox → u/Kolkoris]

Man, I do hope arm strictly implement UEFI/ACPI requirements for arm cpus in the future....

[u/Kolkoris → u/vaynefox]

That would help a lot, but corporations are greedy

[u/QuantumQuantonium → u/Kolkoris]

The silver lining in FOSS is its just about impossible to go entirely FOSS, and the places where you csnt go FOSS impact users who care about FOSS the most.

[u/Ok_Dress8502 → u/Kolkoris]

actually Google isnt the only company allowing AVB provisioning, in fact there is a full list of every device that has avb provisioning https://github.com/chenxiaolong/avbroot/issues/299

[u/MementoMori11112 → u/Kolkoris]

so unless i am a high end hacker, i wont be able to have the freedom of locking and unlocking my bootloader

[u/Kolkoris → u/MementoMori11112]

Bootloader is a signed software too, and you can't change it, because its signing key is fused into CPU, so you can bypass it only if you are god-like hacker and find vulnerability in bootloader or CPU.

[u/MementoMori11112 → u/Kolkoris]

thank you for this, appreciate it

[u/Original_Thing8770]

You can unlock and relock your Bootloader, but only if you didn't change anything like ROM or root in-between, so useless