** Changed in: linux (Ubuntu)
Status: Incomplete => In Progress
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1798441
Title:
Allow signed kernels to be kexec'ed under lockdown
Status in linux package in Ubuntu:
In Progress
Status in linux source package in Bionic:
In Progress
Bug description:
[Impact]
Under kernel lockdown, one can't kexec unless it's using kexec_file_load with
a signed kernel.
[Test case]
It was verified that a signed kernel could be loaded with kexec -s, and
properly booted.
[Regression Potential]
A security issue, as we allow more kernels to be loaded than we would like
to. Though, that's already the case in cosmic.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1798441/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
