Re: [PATCH V2 08/10] efi: Enable secure boot lockdown automatically when enabled in firmware

2012-10-22 Thread Matt Fleming
On Thu, 2012-09-20 at 10:41 -0400, Matthew Garrett wrote: > The firmware has a set of flags that indicate whether secure boot is enabled > and enforcing. Use them to indicate whether the kernel should lock itself > down. > > Signed-off-by: Matthew Garrett > --- > Documentation/x86/zero-page.txt

Re: [PATCH V2 08/10] efi: Enable secure boot lockdown automatically when enabled in firmware

2012-09-27 Thread Serge Hallyn
Quoting Matthew Garrett (m...@redhat.com): > The firmware has a set of flags that indicate whether secure boot is enabled > and enforcing. Use them to indicate whether the kernel should lock itself > down. > > Signed-off-by: Matthew Garrett (purely for the non-firmware bits) seems good, thanks.

[PATCH V2 08/10] efi: Enable secure boot lockdown automatically when enabled in firmware

2012-09-20 Thread Matthew Garrett
The firmware has a set of flags that indicate whether secure boot is enabled and enforcing. Use them to indicate whether the kernel should lock itself down. Signed-off-by: Matthew Garrett --- Documentation/x86/zero-page.txt | 2 ++ arch/x86/boot/compressed/eboot.c | 32