[External] Re: [BUG] blacklist: Problem blacklisting hash (-13) during boot

Thomas Weißschuh thomas at t-8ch.de
Sun Feb 26 04:28:56 UTC 2023


Hi,

Feb 25, 2023 21:42:54 Jeremy Kerr <jk at codeconstruct.com.au>:

> Hi Mark,
>
>> I have flagged this to the FW team (LO-2105) to get their feedback
>> and see if we can get it addressed on our platforms.
>
> Any progress from the FW team about this? I have a fresh-out-of-the-box
> T14s with this issue, there's 33 duplicated hashes in dbx:
>
> $ mokutil --dbx | grep -E '[[:xdigit:]]{64}' | sort | uniq -cd
> [...]
>
> - and so generating 33 KERN_ERR messages on boot.
>
> Given there's (at least) a few months' worth of GA machines with this
> issue, can we suppress the warning?

In 6.3 this message will be downgraded to a warning.
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c95e8f6fd157b45ef0685c221931561e943e82da

A fixed firmware is still desirable, though.

Thomas



More information about the Linux-security-module-archive mailing list