Messages in this thread | | | From | Matthew Garrett <> | Subject | Re: [PATCH V3 11/11] Add option to automatically enforce module signatures when in Secure Boot mode | Date | Thu, 5 Sep 2013 12:54:41 +0000 |
| |
On Thu, 2013-09-05 at 11:16 +0100, Matt Fleming wrote:
> I'd advise checking efi_enabled(EFI_BOOT) along with .secure_boot to > guard against garbage values in boot_params.
We've called sanitize_boot_params(), so we can assert that there are no garbage values.
-- Matthew Garrett <matthew.garrett@nebula.com>
| |