[PATCH 0/2] MODSIGN: Support MOKx
Josh Boyer
jwboyer at redhat.com
Wed Dec 11 16:05:43 UTC 2013
On Wed, Dec 11, 2013 at 03:26:15PM +0800, Lee, Chun-Yi wrote:
> It's base on the kernel patches of Fedora 20.
>
> This patch set add the support to MODSIGN mechanism for revoke kernel
> module by hash or public key. As MokListRT, EFI bootloader(e.g. shim)
> should maintain the MokListXRT container the format the same with dbx.
> The patches will check the hash of kernel module before load it.
Thanks for doing this! A few comments/questions on the patches to
follow.
josh
More information about the kernel
mailing list