Re:Linux kernel lockdown, integrity, and confidentiality
by freedomben on Wednesday April 22, 2020 @02:58PM
(#22948959)
yeah for this reason I've been super excited for kernel 5.6 (I don't usually get excited for new kernel releases cause it means work for me, but this one is different :party: )
The underlying problem is that many distro just use a throwaway pubkey which makes users impossible to sign their modules. Maybe a better security model is needed.