From: Mark Salter <msalter@xxxxxxxxxx> redhat/configs: Enable early lockdown for Arm JIRA: https://issues.redhat.com/browse/RHEL-1927 Upstream Status: RHEL only Author: Mark Salter <msalter@xxxxxxxxxx> Date: Wed, 12 Mar 2025 18:35:28 -0400 Now that there is a signed shim for Arm, enable early lockdown. Signed-off-by: Mark Salter <msalter@xxxxxxxxxx> Signed-off-by: Jeremy Cline <jeremycline@xxxxxxxxxxxxxxxxxxx> diff --git a/redhat/configs/common/generic/arm/aarch64/CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT b/redhat/configs/common/generic/arm/aarch64/CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT new file mode 100644 index blahblah..blahblah 100644 --- /dev/null +++ b/redhat/configs/common/generic/arm/aarch64/CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT @@ -0,0 +1 @@ +CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3862 -- _______________________________________________ kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
