Ubuntu
linux package

  1. Bug #1883949
  2. Comment #1

Comment 1 for bug 1883949

Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

Hi,

Enabling a DKMS package does indeed allow root to sign arbitrary modules. This is part of the compromise of being able to use DKMS packages.

Since this works as intended, I am marking this bug as invalid.

If you have a requirement in your environment where you do not wish the root user to be able to sign arbitrary modules, you must not install DKMS packages and enroll the extra key.