| Date | Sat, 9 Mar 2019 10:00:38 +1100 (AEDT) | From | James Morris <> | Subject | Re: [PATCH 03/27] Enforce module signatures if the kernel is locked down |
| |
On Wed, 6 Mar 2019, Matthew Garrett wrote:
> From: David Howells <dhowells@redhat.com> > > If the kernel is locked down, require that all modules have valid > signatures that we can verify.
Perhaps note that this won't cover the case where folk are using DM-Verity with a signed root hash for verifying kernel modules.
-- James Morris <jmorris@namei.org>
|