I will be at the Linux Security Summit in Minneapolis next month, talking about enabling hibernation on systems with lockdown enabled.
(The context is that I'm the person who disabled hibernation when lockdown is enabled and I've been promising to fix it forever, and then it came up twice in my nvidia interviews last year, so I've committed to speaking about it so I actually do it)
@mjg59 oh so my kernel has CONFIG_SECURITY_LOCKDOWN_LSM=n because of *you personally* 😂
j/k, I wanted to enable secure boot without shafting myself. Had/have to do some "setpci" to deal with b0rked thunderbolt shite… kernel says 🖕 to that w/ lockdown :D
(Honestly I'm not a fan of lockdown anyway, but I agree it's beneficial to have as an option and some environments really want/need it.)
Matthew Garrett
equinox