Comment 2 for bug 1861238

Revision history for this message
Tyler Hicks (tyhicks) wrote :

Thanks for the report! After speaking with the security team, we've come to an agreement that removing the lockdown lift sysrq is the best thing to do. We understand that a small amount of users may rely on that sysrq today to do things like writing to an MSR but they'll still be able to achieve a lockdown free environment by running 'mokutil --disable-validation' and rebooting.