Re: [PATCH 03/27] Enforce module signatures if the kernel is locked down
From: James Morris <jmorris@namei.org>
Date: 2019-03-08 23:00:45
Also in:
lkml
On Wed, 6 Mar 2019, Matthew Garrett wrote:
From: David Howells <dhowells@redhat.com> If the kernel is locked down, require that all modules have valid signatures that we can verify.
Perhaps note that this won't cover the case where folk are using DM-Verity with a signed root hash for verifying kernel modules. -- James Morris [off-list ref]