On Thu, Mar 20, 2025 at 06:40:55PM -0400, James Bottomley wrote: > On Thu, 2025-03-20 at 16:24 +0000, Eric Snowberg wrote: > > Having lockdown enforcement has always been > > a requirement to get a shim signed by Microsoft. > > This is factually incorrect. Microsoft transferred shim signing to an > independent process run by a group of open source maintainers a while > ago: > > https://github.com/rhboot/shim-review/ > > If you actually look, you'll see even Microsoft has to obey this > upstream process for their Linux distro: > > https://github.com/rhboot/shim-review/issues/427 I did not know this. Thanks for educating! > > Regards, > > James > BR, Jarkko
