[lkml]   [2017]   [Oct]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [GIT PULL] Kernel lockdown for secure boot
On Thu, 2017-10-26 at 17:37 +0100, David Howells wrote:
> Hi James,
> Can you pull this patchset into security/next please?
> It adds kernel lockdown support for EFI secure boot. Note that it doesn't yet
> cover:
> bpf - No agreement as to how
> ftrace - Recently suggested, query sent to maintainer
> perf - Not looked at yet.
> and there are some changes recently proposed that make it work with IMA that
> I'll pass on as a follow up when we've fully worked them out.

There's a major difference between leaving out support and preventing
properly signed code from working properly.  We're already at -rc6.
I'm just not sure how there will be time to include the patches, test,
and send James a subsequent pull request before the next open window?


 \ /
  Last update: 2017-10-26 20:23    [W:0.040 / U:0.060 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site