4 ms·
--permissive-security is the setting that you want. You are then able to enroll hashes of unsigned kernels with kmutil.
by my123 6y ago
--permissive-security is the setting that you want. You are then able to enroll hashes of unsigned kernels with kmutil.
- Asmod4n 6y agoKmutil is only there to load kernel extensions? Or did that change with Big Sur?
- my123 6y agoIt changed. You use kmutil create to create the artifacts and add the hash to the Secure Boot policy. (--help at https://pastebin.ubuntu.com/p/mN3Z2kfJWy/ https://pastebin.ubuntu.com/p/mN3Z2kfJWy/, no manpage)