On Thu, 2017-10-26 at 17:37 +0100, David Howells wrote: > Hi James, > > Can you pull this patchset into security/next please? > > It adds kernel lockdown support for EFI secure boot. Note that it doesn't yet > cover: > > bpf - No agreement as to how > ftrace - Recently suggested, query sent to maintainer > perf - Not looked at yet. > > and there are some changes recently proposed that make it work with IMA that > I'll pass on as a follow up when we've fully worked them out.
There's a major difference between leaving out support and preventing properly signed code from working properly. We're already at -rc6. I'm just not sure how there will be time to include the patches, test, and send James a subsequent pull request before the next open window? Mimi
