Linus Torvalds writes: (Summary)
No way will any sane distribution take it, potentially breaking a lot
of machines, and have no way to unbreak them except for "oh, btw, you
have to disable secure boot to get things to work again".
That would be insane.
That would be insane.
So you'd better allow some command line options.
So you'd better allow some command line options.
One reasonable option may be to just disable lockdown by default (to make machines work reliably), and then have a "if you're anal about security, add 'lockdown' to the kernel command line". security, add 'lockdown' to the kernel command line".
That would be insane.
So you'd better allow some command line options.
So you'd better allow some command line options.
One reasonable option may be to just disable lockdown by default (to make machines work reliably), and then have a "if you're anal about security, add 'lockdown' to the kernel command line". security, add 'lockdown' to the kernel command line".