From: Mark Salter on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3862#note_2541132483
Debian still leaves the call to efi_set_secure_boot() in setup_arch() (but moved it up earlier). Determining secure boot state can be arch specific. x86 uses a flag in boot_params. For arm, I added a flag to the DT passed from stub to kernel. Other arches (riscv) could use the DT method and some of the arm code could be moved into efi_init() for common use. x86 might be able to use that also. Moving the security_lock_kernel_down() call into efi_set_secure_boot() makes sense though. -- _______________________________________________ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
