[RFC PATCH v3 00/13] Clavis LSM

[James Bottomley]

On Thu, 2025-03-20 at 16:24 +0000, Eric Snowberg wrote:
> Having lockdown enforcement has always been 
> a requirement to get a shim signed by Microsoft.

This is factually incorrect.  Microsoft transferred shim signing to an
independent process run by a group of open source maintainers a while
ago:

https://github.com/rhboot/shim-review/

If you actually look, you'll see even Microsoft has to obey this
upstream process for their Linux distro:

https://github.com/rhboot/shim-review/issues/427

Regards,

James