=================================
 Boot Security Check
=================================

Date: 2026-07-15T21:55:29+00:00
Hostname: mint-VM
Operating system: Linux Mint 22.3
Kernel: 6.14.0-37-generic

Firmware boot mode
---------------------------------
Boot mode: Legacy BIOS
EFI variables available: no

Secure Boot status
---------------------------------
EFI variables are not supported on this system

Bootloader packages
---------------------------------
grub	
grub2	
grub2-common	2.12-1ubuntu7.3
grub-cloud-amd64	
grub-common	2.12-1ubuntu7.3
grub-coreboot	
grub-doc	
grub-efi	
grub-efi-amd64	
grub-efi-amd64-bin	2.12-1ubuntu7.3
grub-efi-amd64-signed	1.202.5+2.12-1ubuntu7.3
grub-efi-arm	
grub-efi-arm64	
grub-efi-arm64-signed	
grub-efi-ia32	
grub-efi-ia64	
grub-emu	
grub-gfxpayload-lists	0.7build2
grub-ieee1275	
grub-legacy	
grub-legacy-doc	
grub-linuxbios	
grub-pc	2.12-1ubuntu7.3
grub-pc-bin	2.12-1ubuntu7.3
grub-uboot	
grub-xen	
grub-yeeloong	
shim	
shim-signed	1.58+15.8-0ubuntu1

GRUB configuration
---------------------------------
GRUB_TIMEOUT_STYLE=hidden
GRUB_TIMEOUT=0
GRUB_CMDLINE_LINUX_DEFAULT="quiet splash"
GRUB_CMDLINE_LINUX=""

Kernel command line
---------------------------------
BOOT_IMAGE=/boot/vmlinuz-6.14.0-37-generic root=UUID=968a5768-dc16-4b42-8079-a0947bda3a3c ro quiet splash

Mounted boot partitions
---------------------------------
/boot is not separately mounted.

TARGET    SOURCE    FSTYPE OPTIONS
/boot/efi /dev/sda2 vfat   rw,relatime,fmask=0077,dmask=0077,codepage=437,iocharset=iso8859-1,shortname=mixed,errors=remount-ro

Boot path permissions
---------------------------------
drwxr-xr-x root:root /boot
drwx------ root:root /boot/efi

EFI boot entries
---------------------------------
EFI boot entries are unavailable in Legacy BIOS mode.

Kernel lockdown mode
---------------------------------
[none] integrity confidentiality

Summary
---------------------------------
Boot mode:              Legacy BIOS
EFI variables:          no
Secure Boot available:  no
Secure Boot state:      unavailable
Kernel lockdown:        [none] integrity confidentiality

Recommendation: Migrate the installation to UEFI boot mode before Secure Boot can be used.