Re: Draft manpage explaining kernel lockdown

2017-11-15 Thread Pavel Machek
Hi! > Attached is a draft for a manual page (kernel_lockdown.7) that I intend to > point at from messages emitted when the kernel prohibits something because the > kernel is in 'lockdown' mode, typically triggered by EFI secure > boot. What about livepatching? It allows kernel modifications.. and

Re: Draft manpage explaining kernel lockdown

2017-10-18 Thread Michael Kerrisk (man-pages)
Hi David, On 10/05/2017 01:00 PM, David Howells wrote: > Hi Ard, Michael, > > Attached is a draft for a manual page (kernel_lockdown.7) that I intend to > point at from messages emitted when the kernel prohibits something because the > kernel is in 'lockdown' mode, typically triggered by EFI secu

Re: Draft manpage explaining kernel lockdown

2017-10-06 Thread joeyli
Hi David, On Thu, Oct 05, 2017 at 12:00:24PM +0100, David Howells wrote: > Hi Ard, Michael, > > Attached is a draft for a manual page (kernel_lockdown.7) that I intend to > point at from messages emitted when the kernel prohibits something because the > kernel is in 'lockdown' mode, typically tri

Re: Draft manpage explaining kernel lockdown

2017-10-05 Thread Randy Dunlap
On 10/05/17 04:07, Johannes Berg wrote: > On Thu, 2017-10-05 at 12:00 +0100, David Howells wrote: >> >> Only validly signed wifi databases may be use. s/use/used/ > We don't even have this yet, and when we do, we want this to be the > case for typical configurations regardless of lockdown. --

Re: Draft manpage explaining kernel lockdown

2017-10-05 Thread Ard Biesheuvel
On 5 October 2017 at 12:00, David Howells wrote: > Hi Ard, Michael, > > Attached is a draft for a manual page (kernel_lockdown.7) that I intend to > point at from messages emitted when the kernel prohibits something because the > kernel is in 'lockdown' mode, typically triggered by EFI secure boot

Re: Draft manpage explaining kernel lockdown

2017-10-05 Thread David Howells
Florian Weimer wrote: > > Lockdown is typically enabled during boot and may be terminated, if > > configured, by typing a special key combination on a directly attached > > physical keyboard. > > Does this include a Bluetooth keyboard (which might not actually exist and > might in reality be ano

Re: Draft manpage explaining kernel lockdown

2017-10-05 Thread David Howells
Johannes Berg wrote: > > Only validly signed wifi databases may be use. > > We don't even have this yet, and when we do, we want this to be the > case for typical configurations regardless of lockdown. Okay. David

Re: Draft manpage explaining kernel lockdown

2017-10-05 Thread Florian Weimer
On 10/05/2017 01:00 PM, David Howells wrote: Lockdown is typically enabled during boot and may be terminated, if configured, by typing a special key combination on a directly attached physical keyboard. Does this include a Bluetooth keyboard (which might not actually exist and might in reality

Re: Draft manpage explaining kernel lockdown

2017-10-05 Thread Johannes Berg
On Thu, 2017-10-05 at 12:00 +0100, David Howells wrote: > > Only validly signed wifi databases may be use. We don't even have this yet, and when we do, we want this to be the case for typical configurations regardless of lockdown. johannes

Draft manpage explaining kernel lockdown

2017-10-05 Thread David Howells
Hi Ard, Michael, Attached is a draft for a manual page (kernel_lockdown.7) that I intend to point at from messages emitted when the kernel prohibits something because the kernel is in 'lockdown' mode, typically triggered by EFI secure boot. Let me know what you think. David --- .\" .\" Copyright