Can't do pretty boot without imposing unnecessary restrictions on users
|Reported by:||gnu||Owned by:||wmb@…|
|Component:||ofw - open firmware||Version:||Q2D16|
|Deployments affected:||Action Needed:||communicate|
G1G1 is coming again, and it should be possible for OLPC to ship machines that do not try to enforce any kind of software lockdown, but which still look pretty when you boot them.
This issue was swept under the rug by the pressure of time during the first G1G1, but it should be tracked and eventually fixed.
OLPC shouldn't feel like it needs to prevent recipients from modifying their operating system, just so they can see pretty pictures when it boots, yet that was the decision process last time.
OLPC seems dangerously close to believing that it always has to ship all its machines with "security" -- I put it in quotes because it is securing the machine against its owner. Fixing the pretty-boot tie to "security" would start to make it possible to think heretical thoughts -- like shipping a machine that the user is free to customize without going through a dance to get a secret key.