Re: [PATCH 06/24] Add a sysrq option to exit secure boot mode

2017-04-16 Thread Matt Fleming
On Fri, 14 Apr, at 08:05:07PM, Thomas Gleixner wrote: > On Wed, 5 Apr 2017, David Howells wrote: > > > From: Kyle McMartin > > > > Make sysrq+x exit secure boot mode on x86_64, thereby allowing the running > > kernel image to be modified. This lifts the lockdown. > > > >

Re: [PATCH 06/24] Add a sysrq option to exit secure boot mode

2017-04-16 Thread Matt Fleming
On Fri, 14 Apr, at 08:05:07PM, Thomas Gleixner wrote: > On Wed, 5 Apr 2017, David Howells wrote: > > > From: Kyle McMartin > > > > Make sysrq+x exit secure boot mode on x86_64, thereby allowing the running > > kernel image to be modified. This lifts the lockdown. > > > > Signed-off-by: Kyle

Re: [PATCH 06/24] Add a sysrq option to exit secure boot mode

2017-04-14 Thread David Howells
Ard Biesheuvel wrote: > That does bring me to another EFI related point: many of these patches > are x86 specific for no good reason. Note that the sysrq one is awkward since the key chosen *is* arch-specific. SysRq+x can't be arbitrarily assigned to this since some

Re: [PATCH 06/24] Add a sysrq option to exit secure boot mode

2017-04-14 Thread David Howells
Ard Biesheuvel wrote: > That does bring me to another EFI related point: many of these patches > are x86 specific for no good reason. Note that the sysrq one is awkward since the key chosen *is* arch-specific. SysRq+x can't be arbitrarily assigned to this since some other arches have their own

Re: [PATCH 06/24] Add a sysrq option to exit secure boot mode

2017-04-14 Thread Ard Biesheuvel
On 14 April 2017 at 19:05, Thomas Gleixner wrote: > On Wed, 5 Apr 2017, David Howells wrote: > >> From: Kyle McMartin >> >> Make sysrq+x exit secure boot mode on x86_64, thereby allowing the running >> kernel image to be modified. This lifts the lockdown. >>

Re: [PATCH 06/24] Add a sysrq option to exit secure boot mode

2017-04-14 Thread Ard Biesheuvel
On 14 April 2017 at 19:05, Thomas Gleixner wrote: > On Wed, 5 Apr 2017, David Howells wrote: > >> From: Kyle McMartin >> >> Make sysrq+x exit secure boot mode on x86_64, thereby allowing the running >> kernel image to be modified. This lifts the lockdown. >> >> Signed-off-by: Kyle McMartin >>

Re: [PATCH 06/24] Add a sysrq option to exit secure boot mode

2017-04-14 Thread Thomas Gleixner
On Wed, 5 Apr 2017, David Howells wrote: > From: Kyle McMartin > > Make sysrq+x exit secure boot mode on x86_64, thereby allowing the running > kernel image to be modified. This lifts the lockdown. > > Signed-off-by: Kyle McMartin > Signed-off-by: David

Re: [PATCH 06/24] Add a sysrq option to exit secure boot mode

2017-04-14 Thread Thomas Gleixner
On Wed, 5 Apr 2017, David Howells wrote: > From: Kyle McMartin > > Make sysrq+x exit secure boot mode on x86_64, thereby allowing the running > kernel image to be modified. This lifts the lockdown. > > Signed-off-by: Kyle McMartin > Signed-off-by: David Howells > cc: x...@kernel.org Matt,

[PATCH 06/24] Add a sysrq option to exit secure boot mode

2017-04-05 Thread David Howells
From: Kyle McMartin Make sysrq+x exit secure boot mode on x86_64, thereby allowing the running kernel image to be modified. This lifts the lockdown. Signed-off-by: Kyle McMartin Signed-off-by: David Howells cc: x...@kernel.org ---

[PATCH 06/24] Add a sysrq option to exit secure boot mode

2017-04-05 Thread David Howells
From: Kyle McMartin Make sysrq+x exit secure boot mode on x86_64, thereby allowing the running kernel image to be modified. This lifts the lockdown. Signed-off-by: Kyle McMartin Signed-off-by: David Howells cc: x...@kernel.org --- arch/x86/Kconfig| 10 ++

[PATCH 06/24] Add a sysrq option to exit secure boot mode

2017-04-05 Thread David Howells
From: Kyle McMartin Make sysrq+x exit secure boot mode on x86_64, thereby allowing the running kernel image to be modified. This lifts the lockdown. Signed-off-by: Kyle McMartin Signed-off-by: David Howells --- arch/x86/Kconfig

[PATCH 06/24] Add a sysrq option to exit secure boot mode

2017-04-05 Thread David Howells
From: Kyle McMartin Make sysrq+x exit secure boot mode on x86_64, thereby allowing the running kernel image to be modified. This lifts the lockdown. Signed-off-by: Kyle McMartin Signed-off-by: David Howells --- arch/x86/Kconfig| 10 ++ arch/x86/kernel/setup.c |

[PATCH 06/24] Add a sysrq option to exit secure boot mode

2017-04-05 Thread David Howells
From: Kyle McMartin Make sysrq+x exit secure boot mode on x86_64, thereby allowing the running kernel image to be modified. This lifts the lockdown. Signed-off-by: Kyle McMartin Signed-off-by: David Howells --- arch/x86/Kconfig

[PATCH 06/24] Add a sysrq option to exit secure boot mode

2017-04-05 Thread David Howells
From: Kyle McMartin Make sysrq+x exit secure boot mode on x86_64, thereby allowing the running kernel image to be modified. This lifts the lockdown. Signed-off-by: Kyle McMartin Signed-off-by: David Howells --- arch/x86/Kconfig| 10 ++ arch/x86/kernel/setup.c |