search

Foxboron / sbctl

:computer: :lock: :key: Secure Boot key manager
MIT License
1.5k stars 87 forks source link

Landlock prevents the use of --export in enroll-keys #387

Closed ZLima12 closed 1 month ago

ZLima12 commented 1 month ago

Similar to #348 , attempting to run sbctl enroll-keys --export since c9d2539 results in a "permission denied" error when not using --disable-landlock. I'm not sure if unrestricting the current directory (which may be anywhere) is something that would be desired, so I decided not to make a PR.

Foxboron commented 1 month ago

I'm not sure if unrestricting the current directory (which may be anywhere) is something that would be desired, so I decided not to make a PR.

The current directory needs to be added with RWDirs, so feel free to write a patch :)