Not sure whom to offer the fix, since 'Kernel lockdown for secure boot' in not upstream, but it has been picked by fedora and ubuntu. And I see it in next-lockdown branch of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git
So, in addition to (prior to) opening bug reports to distributions I'm sending this patch hoping to reach its origin from where distributions had picked it. Vasily Gorbik (1): debugfs: avoid EPERM when no open file operation defined fs/debugfs/file.c | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) -- 2.18.0.13.gd42ae10