> But Linux doesn't care and lets them run. No, it doesn't, at least on Fedora[0]: “When Secure Boot is enabled, the EFI operating system boot loaders, the Fed

> But Linux doesn't care and lets them run. No, it doesn't, at least on Fedora[0]: “When Secure Boot is enabled, the EFI operating system boot loaders, the Fedora kernel, and all kernel modules must be signed with a private key and authenticated with the corresponding public key.” [0] https://docs.fedoraproject.org/en-US/Fedora/24/html/System_Administrators_Guide/sect-signing-kernel-modules-for-secure-boot.html https://docs.fedoraproject.org/en-US/Fedora/24/html/System_A...