Messages in this thread | | | Date | Wed, 15 Nov 2017 22:12:46 +0100 | From | Pavel Machek <> | Subject | Re: Draft manpage explaining kernel lockdown |
| |
Hi!
> Attached is a draft for a manual page (kernel_lockdown.7) that I intend to > point at from messages emitted when the kernel prohibits something because the > kernel is in 'lockdown' mode, typically triggered by EFI secure > boot.
What about livepatching? It allows kernel modifications.. and it has some interestlingly insecure /sys controls being merged just now...
Pavel
-- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html [unhandled content-type:application/pgp-signature] | |