Re: [PATCH 07/24] hibernate: Disable when the kernel is locked down
From: Pavel Machek
Date: Fri Apr 13 2018 - 16:22:40 EST
On Wed 2018-04-11 17:25:25, David Howells wrote:
> From: Josh Boyer <jwboyer@xxxxxxxxxxxxxxxxx>
>
> There is currently no way to verify the resume image when returning
> from hibernate. This might compromise the signed modules trust model,
> so until we can work with signed hibernate images we disable it when the
> kernel is locked down.
I'd rather see hibernation fixed than disabled like this.
I believe Jiri Kosina may have some patches for that?
Pavel
--
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
Attachment:
signature.asc
Description: Digital signature