Comment 23 for bug 1866909

Revision history for this message
Seth Forshee (sforshee) wrote :

Our policy is to require module signatures only under lockdown. CONFIG_MODULE_SIG_FORCE requires modules to be signed unconditionally, which makes dkms impossible on systems which have no mechanism for importing keys from firmware.