Linux Supply Chain Validation Cheat Sheet

Linux offers several tools and techniques to users that enable them to search systems for information on hardware and firmware. This information does not validate a supply chain.

However, it provides data that can be used to perform various levels of validation with some manual investigation. This guide contains tools that can provide a higher level of validation. These include LVFS and tools designed to detect vulnerabilities or incorrect configurations.

There are many Linux distributions and configuration options available. The commands listed in the article linked below may not function exactly as described. Some may be part of your distribution, while others must be downloaded.

The link for this article located at Security Boulevard is no longer available.