[PATCH 0/2] MODSIGN: Support MOKx

Josh Boyer jwboyer at redhat.com
Wed Dec 11 16:05:43 UTC 2013


On Wed, Dec 11, 2013 at 03:26:15PM +0800, Lee, Chun-Yi wrote:
> It's base on the kernel patches of Fedora 20.
> 
> This patch set add the support to MODSIGN mechanism for revoke kernel
> module by hash or public key. As MokListRT, EFI bootloader(e.g. shim)
> should maintain the MokListXRT container the format the same with dbx.
> The patches will check the hash of kernel module before load it.

Thanks for doing this!  A few comments/questions on the patches to
follow.

josh


More information about the kernel mailing list