Re: Firmware signing -- Re: [PATCH 00/27] security, efi: Add kernel lockdown

[David Howells]

Alan Cox <gnomes@xxxxxxxxxxxxxxxxxxx> wrote:

> So you don't actually need to sign a lot of PC class firmware because
> it's already signed.

Whilst that may be true, we either have to check signatures on every bit of
firmware that the appropriate driver doesn't say is meant to be signed or not
bother.

David