** Tags removed: verification-needed-bionic
** Tags added: kernel-fixup-verification-needed-bionic

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1798441

Title:
  Allow signed kernels to be kexec'ed under lockdown

Status in linux package in Ubuntu:
  Fix Released
Status in linux source package in Bionic:
  Fix Released

Bug description:
  [Impact]
  Under kernel lockdown, one can't kexec unless it's using kexec_file_load with 
a signed kernel.

  [Test case]
  It was verified that a signed kernel could be loaded with kexec -s, and 
properly booted.

  [Regression Potential]
  A security issue, as we allow more kernels to be loaded than we would like 
to. Though, that's already the case in cosmic.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1798441/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to