Kernel SRU Workflow

  1. Bug #2044107
  2. Comment #3

Comment 3 for bug 2044107

Revision history for this message
Paolo Pisati (p-pisati) wrote :

amd64:
$ uname -a
Linux amd64-secureboot-testing 6.6.0-13-generic #13-Ubuntu SMP PREEMPT_DYNAMIC Tue Nov 21 15:42:23 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

$ sudo dmesg | grep locked
[ 0.000000] Kernel is locked down from EFI Secure Boot mode; see man kernel_lockdown.7
$ sudo dmesg | grep secure
[ 0.000000] secureboot: Secure boot enabled

$ cat /sys/kernel/security/lockdown
none [integrity] confidentiality

arm64:
$ uname -a
Linux arm64-secureboot-testing 6.6.0-13-generic #13-Ubuntu SMP PREEMPT_DYNAMIC Tue Nov 21 16:11:51 UTC 2023 aarch64 aarch64 aarch64 GNU/Linux

$ sudo dmesg | grep locked
[ 0.000000] Kernel is locked down from EFI Secure Boot mode; see man kernel_lockdown.7
$ sudo dmesg | grep secure
[ 0.000000] secureboot: Secure boot enabled

$ cat /sys/kernel/security/lockdown
none [integrity] confidentiality