<story><title>Linux Kernel Lockdown and UEFI Secure Boot</title><url>https://mjg59.dreamwidth.org/50577.html</url></story><parent_chain></parent_chain><comment><author>Arbalest</author><text>Let&amp;#x27;s be clear here. This is about enabling Lockdown when UEFI Secure Boot is enabled by default.&lt;p&gt;So the concern is essentially that binary distributions, which are going to be responsible for kernel flags, may enable this, whether it is default in the default kernel config or not. As best as I can tell that is the crux of Linus&amp;#x27; concerns. MJG suggesting that the kernel flag can be turned off, while true, is not a response which considers the defacto usage which may result.</text></comment>
<story><title>Linux Kernel Lockdown and UEFI Secure Boot</title><url>https://mjg59.dreamwidth.org/50577.html</url></story><parent_chain></parent_chain><comment><author>Arbalest</author><text>The reason we&amp;#x27;re seeing this blog post is quite clearly due to this statement from Linus:&lt;p&gt;&amp;#x27;This discussion is over until you give an actual honest-to-goodness reason for why you tied the two features together. No more &amp;quot;Why not?&amp;quot; crap.&amp;#x27;&lt;p&gt;Notice LKML is from the 3rd of April, and MJGs blog post from the 4th of April.&lt;p&gt;Edit: correct initials</text></comment>