Re: [PATCH 09/27] hibernate: Disable when the kernel is locked down

On Thu 2019-02-28 15:11:45, Matthew Garrett wrote: > From: Josh Boyer > > There is currently no way to verify the resume image when returning > from hibernate. This might compromise the signed modules trust model, > so until we can work with signed hibernate images we disable it when the > kerne

Re: [PATCH 09/27] hibernate: Disable when the kernel is locked down

> Suse have a solution for this that I'd like to see pushed again, but > from a practical perspective enterprise distributions have been > shipping this for some time without significant obvious customer > complaint. Probably because their IT department hasn't noticed 8) Alan

Re: [PATCH 09/27] hibernate: Disable when the kernel is locked down

On Thu, Mar 7, 2019 at 6:55 AM Alan Cox wrote: > > On Wed, 6 Mar 2019 15:58:55 -0800 > Matthew Garrett wrote: > > > From: Josh Boyer > > > > There is currently no way to verify the resume image when returning > > from hibernate. This might compromise the signed modules trust model, > > so unti

Re: [PATCH 09/27] hibernate: Disable when the kernel is locked down

On Wed, 6 Mar 2019 15:58:55 -0800 Matthew Garrett wrote: > From: Josh Boyer > > There is currently no way to verify the resume image when returning > from hibernate. This might compromise the signed modules trust model, > so until we can work with signed hibernate images we disable it when th