Re: [External] Re: [BUG] blacklist: Problem blacklisting hash (-13) during boot
From: Thomas Weißschuh <hidden>
Date: 2023-02-26 04:29:24
Also in:
keyrings, linux-integrity, lkml
From: Thomas Weißschuh <hidden>
Date: 2023-02-26 04:29:24
Also in:
keyrings, linux-integrity, lkml
Hi, Feb 25, 2023 21:42:54 Jeremy Kerr [off-list ref]:
Hi Mark,quoted
I have flagged this to the FW team (LO-2105) to get their feedback and see if we can get it addressed on our platforms.Any progress from the FW team about this? I have a fresh-out-of-the-box T14s with this issue, there's 33 duplicated hashes in dbx: $ mokutil --dbx | grep -E '[[:xdigit:]]{64}' | sort | uniq -cd [...] - and so generating 33 KERN_ERR messages on boot. Given there's (at least) a few months' worth of GA machines with this issue, can we suppress the warning?
In 6.3 this message will be downgraded to a warning. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c95e8f6fd157b45ef0685c221931561e943e82da A fixed firmware is still desirable, though. Thomas