Comment 29 for bug 1866909

Revision history for this message
Seth Forshee (sforshee) wrote :

Oh but PPC_SECURE_BOOT depends on IMA_ARCH_POLICY. For now I'm going to make it depend on that or LOCK_DOWN_IN_SECURE_BOOT to get the test build going. I think this makes sense because lockdown enforces signatures for module loading and kexec (plus a number of other restrictions), which I think is all the IMA arch policy is enforcing.