Component: Workstation bootloader
Defined in model.py:411
Boots Qubes OS from the encrypted disk.
Threats Affecting This Component
| Threat | Status | Risk | After mitigations | Mitigations |
|---|---|---|---|---|
| Attacker has temporary physical access to workstation laptop THREATQW59 | unmanaged | 6 medium | 6 medium | Use safeboot or qubes anti-evil-maid for measured boot (https://github.com/freedomofpress/securedrop-workstation/issues/602); Use coreboot on workstation |
| Evil maid attack on bootloader THREATQW13 | accepted | 3 low | 3 low |