1

It seems that LivePatch works with SecureBoot, but what about self-signed kernel modules?

If a kernel patch is (auto)applied via livepatch, and I am using secure boot, do I have to re-sign the kernel modules that were active before the patch was applied? Normally you need to re-sign the modules upon kernel updates.

  • How should we know? Try it and post it you have a problem lol – Panther Aug 30 '18 at 18:27
  • 2
    The purpose of the stack community is to try to draw from each others' experiences. Imagine how much noise we would have if everyone that didn't know an answer said "How should we know?" Funny I have to mention this to someone who has 650x more points than me, but whatever. And yes, if I don't get an answer I will make sure to post it here if/when I find out on my own. But I can't control the insertion of a livepatch, so have patience. – Gaia Aug 31 '18 at 5:44
  • I understand but your scenario is very specific to your hardware and to some extent it does not sound if you have a problem or not as it is untested. – Panther Aug 31 '18 at 5:52
  • 1
    Specific to my hardware? Kernel modules are a pretty common thing these days, and none of the ones I use are for hardware reasons. – Gaia Sep 5 '18 at 2:01

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.