allow kexec_file of unsigned images under lockdown
Bug #1800856 reported by
Thadeu Lima de Souza Cascardo
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| linux (Ubuntu) |
In Progress
|
Undecided
|
Thadeu Lima de Souza Cascardo | ||
| Bionic |
In Progress
|
Undecided
|
Thadeu Lima de Souza Cascardo | ||
| Cosmic |
In Progress
|
Undecided
|
Thadeu Lima de Souza Cascardo | ||
| Disco |
Won't Fix
|
Undecided
|
Thadeu Lima de Souza Cascardo | ||
Bug Description
[Impact]
When using kexec -s with an unsigned image, it will fail requiring a signed image, even if the system is not under lockdown. kexec without the -s option will still work.
[Test case]
Tested with kexec -s with both a signed and unsigned image, both under lockdown and not under lockdown.
[Potential Regressions]
We allow unsigned kernels to be loaded even under lockdown. However, the test case has tested that and it still failed. Other regression would be that no kernel could be loaded. Also tested under test case.
| Changed in linux (Ubuntu Bionic): | |
| status: | New → In Progress |
| Changed in linux (Ubuntu Disco): | |
| status: | New → In Progress |
| Changed in linux (Ubuntu Cosmic): | |
| status: | New → In Progress |
| Changed in linux (Ubuntu Disco): | |
| assignee: | nobody → Thadeu Lima de Souza Cascardo (cascardo) |
| Changed in linux (Ubuntu Cosmic): | |
| assignee: | nobody → Thadeu Lima de Souza Cascardo (cascardo) |
| Changed in linux (Ubuntu Bionic): | |
| assignee: | nobody → Thadeu Lima de Souza Cascardo (cascardo) |
| Changed in linux (Ubuntu Disco): | |
| status: | In Progress → Won't Fix |
To post a comment you must log in.
