Messages in this thread | | | From | "Luis R. Rodriguez" <> | Date | Tue, 3 Apr 2018 10:06:10 -0700 | Subject | Re: [RFC PATCH v1] fw_lockdown: new micro LSM module to prevent loading unsigned firmware |
| |
On Tue, Apr 3, 2018 at 9:56 AM, Luis R. Rodriguez <mcgrof@kernel.org> wrote: > The biggest thing which has changed since then is that we decided to *not* > support or streamline generic firmware signing (non-IMA) for now for a few > reasons [0] [1] which are important to re-iterate as these are easy to forget, > and AFAICT not documented anywhere.
And the URLs...
[0] https://lkml.kernel.org/r/20171204195155.GU729@wotan.suse.de [1] https://lkml.kernel.org/r/20171207153209.5da771a9@alans-desktop
Luis
| |