Switch Secure Boot to lock down in integrity mode (rhbz 1815571)
This commit is contained in:
parent
5902b3e0f2
commit
abd266769c
3 changed files with 6 additions and 3 deletions
|
|
@ -303,7 +303,7 @@ index 77ea96b794bd..a119e1bc9623 100644
|
|||
+
|
||||
+#ifdef CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT
|
||||
+ if (efi_enabled(EFI_SECURE_BOOT))
|
||||
+ security_lock_kernel_down("EFI Secure Boot mode", LOCKDOWN_CONFIDENTIALITY_MAX);
|
||||
+ security_lock_kernel_down("EFI Secure Boot mode", LOCKDOWN_INTEGRITY_MAX);
|
||||
+#endif
|
||||
+
|
||||
dmi_setup();
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue