Messages in this thread | | | Date | Thu, 5 Apr 2018 09:25:19 +1000 (AEST) | From | James Morris <> | Subject | Re: An actual suggestion (Re: [GIT PULL] Kernel lockdown for secure boot) |
| |
On Wed, 4 Apr 2018, David Howells wrote:
> > 6. There's a way to *decrease* the lockdown level below the configured > > value. (This ability itself may be gated by a config option.) > > Choices include a UEFI protected variable, > > By turning secure boot off, maybe?
It's surely reasonable to allow an already secure-booted system to be debugged without needing to be rebooted.
- James -- James Morris <jmorris@namei.org>
| |