From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751946AbdJELHR (ORCPT ); Thu, 5 Oct 2017 07:07:17 -0400 Received: from s3.sipsolutions.net ([144.76.63.242]:37424 "EHLO sipsolutions.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751641AbdJELHQ (ORCPT ); Thu, 5 Oct 2017 07:07:16 -0400 Message-ID: <1507201630.2387.16.camel@sipsolutions.net> Subject: Re: Draft manpage explaining kernel lockdown From: Johannes Berg To: David Howells , Ard Biesheuvel , mtk.manpages@gmail.com Cc: mcgrof@kernel.org, linux-man@vger.kernel.org, keyrings@vger.kernel.org, linux-security-module@vger.kernel.org, linux-efi@vger.kernel.org, linux-kernel@vger.kernel.org Date: Thu, 05 Oct 2017 13:07:10 +0200 In-Reply-To: <7969.1507201224@warthog.procyon.org.uk> References: <7969.1507201224@warthog.procyon.org.uk> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.26.0-1 Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, 2017-10-05 at 12:00 +0100, David Howells wrote: > > Only validly signed wifi databases may be use. We don't even have this yet, and when we do, we want this to be the case for typical configurations regardless of lockdown. johannes