------- Comment From <email address hidden> 2017-07-10 16:49 EDT-------
Hi Canonical,
Here are some clarifications on the feature from the security team:
> To clarify, this feature is only asking for a change to the Ubuntu kernel build
> process to produce a signed kernel and no other development. They should be able
> to do that with sign-file and the existing UEFI shim key."
In support to a full secure boot up to the payload OS in 2018, a signed kernel will be very nice to have for 17.10. Will you be able to sign the Ubuntu kernel for the 17.10 release?
------- Comment From <email address hidden> 2017-07-10 16:49 EDT-------
Hi Canonical,
Here are some clarifications on the feature from the security team:
> To clarify, this feature is only asking for a change to the Ubuntu kernel build
> process to produce a signed kernel and no other development. They should be able
> to do that with sign-file and the existing UEFI shim key."
In support to a full secure boot up to the payload OS in 2018, a signed kernel will be very nice to have for 17.10. Will you be able to sign the Ubuntu kernel for the 17.10 release?
Regards,
Vicky