Re: An actual suggestion (Re: [GIT PULL] Kernel lockdown for secure boot)

James Morris
2018-04-04T23:25:19Z

On Wed, 4 Apr 2018, David Howells wrote:

> > 6. There's a way to *decrease* the lockdown level below the configured
> > value. (This ability itself may be gated by a config option.)
> > Choices include a UEFI protected variable,
>
> By turning secure boot off, maybe?

It's surely reasonable to allow an already secure-booted system to be
debugged without needing to be rebooted.

- James
--
James Morris
<jmorris@namei.org>