[External] Re: [BUG] blacklist: Problem blacklisting hash (-13) during boot
Thomas Weißschuh
thomas at t-8ch.de
Sun Feb 26 04:28:56 UTC 2023
Hi,
Feb 25, 2023 21:42:54 Jeremy Kerr <jk at codeconstruct.com.au>:
> Hi Mark,
>
>> I have flagged this to the FW team (LO-2105) to get their feedback
>> and see if we can get it addressed on our platforms.
>
> Any progress from the FW team about this? I have a fresh-out-of-the-box
> T14s with this issue, there's 33 duplicated hashes in dbx:
>
> $ mokutil --dbx | grep -E '[[:xdigit:]]{64}' | sort | uniq -cd
> [...]
>
> - and so generating 33 KERN_ERR messages on boot.
>
> Given there's (at least) a few months' worth of GA machines with this
> issue, can we suppress the warning?
In 6.3 this message will be downgraded to a warning.
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c95e8f6fd157b45ef0685c221931561e943e82da
A fixed firmware is still desirable, though.
Thomas
More information about the Linux-security-module-archive
mailing list