# Re: \[PATCH 03/27\] Enforce module signatures if the kernel is locked down

- From: James Morris \<jmorris@namei.org\>
- Date: 2019-03-08 23:00:45 
- List: linux-security-module
- Page: https://ratatoskr.run/linux-security-module/2019/03/5534008
- Thread: https://ratatoskr.run/linux-security-module/2019/03/5532057/t.md

```text
On Wed, 6 Mar 2019, Matthew Garrett wrote:

> From: David Howells <dhowells@redhat.com>
> 
> If the kernel is locked down, require that all modules have valid
> signatures that we can verify.

Perhaps note that this won't cover the case where folk are using DM-Verity 
with a signed root hash for verifying kernel modules.


-- 
James Morris
[ref]

```