Re: [RFC PATCH v3 00/13] Clavis LSM

[Jarkko Sakkinen]

On Thu, Mar 20, 2025 at 06:40:55PM -0400, James Bottomley wrote:
> On Thu, 2025-03-20 at 16:24 +0000, Eric Snowberg wrote:
> > Having lockdown enforcement has always been 
> > a requirement to get a shim signed by Microsoft.
> 
> This is factually incorrect.  Microsoft transferred shim signing to an
> independent process run by a group of open source maintainers a while
> ago:
> 
> https://github.com/rhboot/shim-review/
> 
> If you actually look, you'll see even Microsoft has to obey this
> upstream process for their Linux distro:
> 
> https://github.com/rhboot/shim-review/issues/427

I did not know this. Thanks for educating!

> 
> Regards,
> 
> James
> 

BR, Jarkko