Libreboot

Libreboot is a Coreboot distribution, which differs from the original design in cleaning from proprietary binary inserts ^{[7] [8]} . Libreboot is not a Coreboot fork, but is created on the basis of a change in the current code base by analogy with the Linux-Libre project, which cleans the Linux kernel from proprietary components. At the same time, Libreboot is positioned as a product for end users and is considered as an attempt to turn CoreBoot into a distribution kit that can be used by any user who does not have special skills. Libreboot includes a set of build scripts, additional components such as GRUB, memtest86 + and bucts, and provides user-friendly documentation ^[9] . In addition to removing the proprietary software in libreboot, changes have also been made to make the Coreboot easier to use with assembly automation and the installation process ^{[10] [11]} .

With The Libreboot project, modifications are possible for completely free versions of some ThinkPad , Chromebook , MacBook laptops, as well as desktops, servers and motherboards of workstations ^{[12] [13]} . According to the documentation, Libreboot can work with any Linux distribution that uses the kernel mode setting (KMS) method for graphics, while Windows is not supported and its use is not recommended. BSD support has not been tested, but several successful downloads to OpenBSD and NetBSD have been reported ^[14] .

Libreboot was launched in 2013 to make a free version of coreboot (by removing the binary blobs included in the coreboot sources ). Since February 2015, the project has been approved by the Free Software Foundation (FSF) ^[15] . Libreboot became part of the GNU project in May 2016 ^[16] .

In September 2016, the lead developer announced that Libreboot would leave the GNU project, and in January 2017, Richard Stallman announced that Libreboot had left the GNU project ^[17] . The reason for the dispute was a statement from the lead maintainer ^[18] that the FSF dismissed a transsexual employee because the employee reported gender harassment ^[19] . The FSF denied these claims on the same day ^[20] . In April 2017, the Libreboot project dropped the charges from its website, the lead developer apologized for the incident and the site management was transferred to another employee ^[21] . Three weeks later, the proposal to re-join the GNU project was published and received clear support ^[22] .

On May 1, 2017, Intel confirmed and fixed the error of remote privilege elevation (CVE-2017-5689) in its firmware Management Engine ^[23] , which had long been assumed by members of the Coreboot and Libreboot communities ^{[24] [25]} . Each Intel platform with any of the Intel Standard Manageability, Active Management Technology or Small Business Technology technologies and with the micro-architecture of the central processor from Nehalem (2008) to Kaby Lake (2017) contains a “security hole” with a remote burglary in IME (Intel Management Engine) ^{[ 26] [27]} . Another perceived security risk in IME is Intel vPro cellular radio technology ^[28] , through which hardware components can be accessed remotely or the computer may even be damaged, but there is no evidence that this ability exists in the chip itself (vPro is designed to be used services of external radio devices, which is why this rumor began) ^[29] .

Libreboot supports the following systems ^{[30] [31]} :

• Server boards: Asus KFSN4-DRE and Asus KGPE-D16.
• Workstation boards: Asus KCMA-D8, Intel D510MO, Gigabyte GA-G41M-ES2L and Apple iMac 5.2.
• Laptops: Asus Chromebook C201, Lenovo ThinkPad X60, X60s and X60 Tablet, Lenovo ThinkPad T60 (models with ATI video processors cannot be used due to non-free vBIOS ), Lenovo ThinkPad X200, X200s (with some exceptions) and X200 Tablet, Lenovo ThinkPad R400, Lenovo ThinkPad T400, Lenovo ThinkPad T500, Apple MacBook 1.1 and Apple MacBook 2.1.

• libreboot.org - the official site of libreboot