Messages in this thread | | | From | David Howells <> | Subject | Re: Firmware signing -- Re: [PATCH 00/27] security, efi: Add kernel lockdown | Date | Mon, 13 Nov 2017 21:44:47 +0000 |
| |
Alan Cox <gnomes@lxorguk.ukuu.org.uk> wrote:
> So you don't actually need to sign a lot of PC class firmware because > it's already signed.
Whilst that may be true, we either have to check signatures on every bit of firmware that the appropriate driver doesn't say is meant to be signed or not bother.
David
| |