[PATCH 5/5] Add a sysrq option to exit secure boot mode

[PATCH 0/5] security, efi: Set lockdown if in secure boot mode · David Howells <dhowells@redhat.com> · 2017-05-24
[PATCH 1/5] efi: Move the x86 secure boot switch to generic code · David Howells <dhowells@redhat.com> · 2017-05-24
Re: [PATCH 1/5] efi: Move the x86 secure boot switch to generic code · joeyli <jlee@suse.com> · 2017-05-26
[PATCH 2/5] efi: Add EFI_SECURE_BOOT bit · David Howells <dhowells@redhat.com> · 2017-05-24
Re: [PATCH 2/5] efi: Add EFI_SECURE_BOOT bit · joeyli <jlee@suse.com> · 2017-05-26
[PATCH 3/5] Add the ability to lock down access to the running kernel image · David Howells <dhowells@redhat.com> · 2017-05-24
Re: [PATCH 3/5] Add the ability to lock down access to the running kernel image · Casey Schaufler <casey@schaufler-ca.com> · 2017-05-24
Re: [PATCH 3/5] Add the ability to lock down access to the running kernel image · David Howells <dhowells@redhat.com> · 2017-05-25
Re: [PATCH 3/5] Add the ability to lock down access to the running kernel image · Casey Schaufler <casey@schaufler-ca.com> · 2017-05-25
Re: [PATCH 3/5] Add the ability to lock down access to the running kernel image · David Howells <dhowells@redhat.com> · 2017-05-26
Re: [PATCH 3/5] Add the ability to lock down access to the running kernel image · joeyli <jlee@suse.com> · 2017-05-26
Re: [PATCH 3/5] Add the ability to lock down access to the running kernel image · joeyli <jlee@suse.com> · 2017-05-26
[PATCH 4/5] efi: Lock down the kernel if booted in secure boot mode · David Howells <dhowells@redhat.com> · 2017-05-24
Re: [PATCH 4/5] efi: Lock down the kernel if booted in secure boot mode · joeyli <jlee@suse.com> · 2017-05-26
[PATCH 5/5] Add a sysrq option to exit secure boot mode · David Howells <dhowells@redhat.com> · 2017-05-24
Re: [PATCH 5/5] Add a sysrq option to exit secure boot mode · joeyli <jlee@suse.com> · 2017-05-27
Re: [PATCH 5/5] Add a sysrq option to exit secure boot mode · James Morris <jmorris@namei.org> · 2017-05-30
Re: [PATCH 0/5] security, efi: Set lockdown if in secure boot mode · Ard Biesheuvel <hidden> · 2017-05-30
Re: [PATCH 0/5] security, efi: Set lockdown if in secure boot mode · David Howells <dhowells@redhat.com> · 2017-05-31
Re: [PATCH 0/5] security, efi: Set lockdown if in secure boot mode · Ard Biesheuvel <hidden> · 2017-05-31
Re: [PATCH 0/5] security, efi: Set lockdown if in secure boot mode · David Howells <dhowells@redhat.com> · 2017-05-31
Re: [PATCH 0/5] security, efi: Set lockdown if in secure boot mode · Ard Biesheuvel <hidden> · 2017-05-31
Re: [PATCH 0/5] security, efi: Set lockdown if in secure boot mode · David Howells <dhowells@redhat.com> · 2017-06-06
Re: [PATCH 0/5] security, efi: Set lockdown if in secure boot mode · Ard Biesheuvel <hidden> · 2017-06-09
Re: [PATCH 0/5] security, efi: Set lockdown if in secure boot mode · Kees Cook <hidden> · 2017-06-09

From: jmorris@namei.org (James Morris)
Date: 2017-05-30 10:49:13
Also in: linux-efi, lkml

On Wed, 24 May 2017, David Howells wrote:

From: Kyle McMartin <redacted>

Make sysrq+x exit secure boot mode on x86_64, thereby allowing the running
kernel image to be modified.  This lifts the lockdown.

Signed-off-by: Kyle McMartin <redacted>
Signed-off-by: David Howells <dhowells@redhat.com>
cc: x86 at kernel.org


Reviewed-by: James Morris <redacted>


-- 
James Morris
[off-list ref]

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help