[PATCH V34 10/29] hibernate: Disable when the kernel is locked down

Jiri Kosina jikos at kernel.org
Mon Jun 24 13:21:23 UTC 2019


On Sat, 22 Jun 2019, Pavel Machek wrote:

> > There is currently no way to verify the resume image when returning
> > from hibernate.  This might compromise the signed modules trust model,
> > so until we can work with signed hibernate images we disable it when the
> > kernel is locked down.
> 
> I keep getting these...
> 
> IIRC suse has patches to verify the images.

Yeah, Joey Lee is taking care of those. CCing.

-- 
Jiri Kosina
SUSE Labs



More information about the Linux-security-module-archive mailing list