Add support for revoking older kernel images via DBX - Githubissues

andreyv / sbupdate

Generate and sign kernel images for UEFI Secure Boot on Arch Linux

GNU General Public License v3.0

225 stars 20 forks source link

Add support for revoking older kernel images via DBX #27

Closed mwberry closed 4 years ago

mwberry commented 4 years ago

Adds opt-in config flag to begin revoking old kernel images
Ensures the currently installed image is never in the DBX
Ensures one prior kernel image is not in the DBX
Supports rolling back to old kernels by removing hashes from DBX

RE: https://github.com/andreyv/sbupdate/issues/26

andreyv commented 4 years ago

Closing as per https://github.com/andreyv/sbupdate/issues/26#issuecomment-581126333.