Jens Rottmann [off-list ref] wrote:

quoted

When the kernel is running in secure boot mode [...] prevent
access by means of configuring driver modules

I may easily be wrong, but doesn't secure boot require EFI?

For the patches I have, yes.  It could feasibly be done by some other
mechanism, though I don't know that such an alternative exists.

Do secure boot capable systems with old CS5535/36 even exist?

No idea.

David
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html