Skip to content

v3.2.0: Theme support + security audit fixes

Choose a tag to compare

View all tags
@jlobue10 jlobue10 released this 01 Aug 21:41
v3.2.0
fc4e2e5

Theme support

  • 7 bundled rEFInd themes (BlackCatMuzzle, Matrix-rEFInd, rEFInd-fallout, rEFInd-glassy, rEFInd-mountain, Starwars-rEFInd, wave) — all credit to the original theme authors; see the README Themes section for per-theme credits, upstream links, and licenses
  • Theme picker in the GUI (None / any theme / Random), with an Install Themes button that copies the theme collection to the ESP
  • Per-boot theme randomizer service (Linux): picks a random valid theme each boot
  • Robust design: refind.conf carries one stable include themes/active_theme.conf line; switching or randomizing themes swaps only that file — the main config is never rewritten at boot. Theme settings intentionally supersede the GUI settings above them.

Security & robustness (audit)

  • Linux installers now verify the new rEFInd boot entry (label, loader, ESP PARTUUID) before deactivating Windows Boot Manager, and fail closed with honest error reporting
  • Config and image installs to the ESP are staged and published config-last, preserving the previous config for rollback
  • Windows installer staging moved to a protected %SystemRoot%\Temp workspace with Administrators/SYSTEM-only ACLs; downloads are integrity-checked before touching the ESP; failed driver downloads no longer destroy known-good drivers
  • Windows system tools (mountvol, bcdedit, PowerShell) are invoked by absolute system paths
  • Exact SteamOS firmware entry matching (device path + BootOrder) replaces loose label matching
  • Application updates can now seed newly bundled assets on Windows without overwriting user files

Note: this release includes rebuilt GUI binaries — required, since the privileged install scripts are integrity-pinned to the GUI.

Assets 7
Loading