Hi!
> Attached is a draft for a manual page (kernel_lockdown.7) that I intend to
> point at from messages emitted when the kernel prohibits something because the
> kernel is in 'lockdown' mode, typically triggered by EFI secure
> boot.
What about livepatching? It allows kernel modifications.. and
Hi David,
On 10/05/2017 01:00 PM, David Howells wrote:
> Hi Ard, Michael,
>
> Attached is a draft for a manual page (kernel_lockdown.7) that I intend to
> point at from messages emitted when the kernel prohibits something because the
> kernel is in 'lockdown' mode, typically triggered by EFI secu
Hi David,
On Thu, Oct 05, 2017 at 12:00:24PM +0100, David Howells wrote:
> Hi Ard, Michael,
>
> Attached is a draft for a manual page (kernel_lockdown.7) that I intend to
> point at from messages emitted when the kernel prohibits something because the
> kernel is in 'lockdown' mode, typically tri
On 10/05/17 04:07, Johannes Berg wrote:
> On Thu, 2017-10-05 at 12:00 +0100, David Howells wrote:
>>
>> Only validly signed wifi databases may be use.
s/use/used/
> We don't even have this yet, and when we do, we want this to be the
> case for typical configurations regardless of lockdown.
--
On 5 October 2017 at 12:00, David Howells wrote:
> Hi Ard, Michael,
>
> Attached is a draft for a manual page (kernel_lockdown.7) that I intend to
> point at from messages emitted when the kernel prohibits something because the
> kernel is in 'lockdown' mode, typically triggered by EFI secure boot
Florian Weimer wrote:
> > Lockdown is typically enabled during boot and may be terminated, if
> > configured, by typing a special key combination on a directly attached
> > physical keyboard.
>
> Does this include a Bluetooth keyboard (which might not actually exist and
> might in reality be ano
Johannes Berg wrote:
> > Only validly signed wifi databases may be use.
>
> We don't even have this yet, and when we do, we want this to be the
> case for typical configurations regardless of lockdown.
Okay.
David
On 10/05/2017 01:00 PM, David Howells wrote:
Lockdown is typically enabled during boot and may be terminated, if configured,
by typing a special key combination on a directly attached physical keyboard.
Does this include a Bluetooth keyboard (which might not actually exist
and might in reality
On Thu, 2017-10-05 at 12:00 +0100, David Howells wrote:
>
> Only validly signed wifi databases may be use.
We don't even have this yet, and when we do, we want this to be the
case for typical configurations regardless of lockdown.
johannes
Hi Ard, Michael,
Attached is a draft for a manual page (kernel_lockdown.7) that I intend to
point at from messages emitted when the kernel prohibits something because the
kernel is in 'lockdown' mode, typically triggered by EFI secure boot.
Let me know what you think.
David
---
.\"
.\" Copyright
10 matches
Mail list logo