Message-ID: <e8190083513e08b2d237ee428ee6606de2c29b91.camel@codeconstruct.com.au>
Subject: Re: [External] Re: [BUG] blacklist: Problem blacklisting hash (-13)
 during boot
From:   Jeremy Kerr <jk@codeconstruct.com.au>
To:     Thomas =?ISO-8859-1?Q?Wei=DFschuh?= <thomas@t-8ch.de>
Cc:     Mark Pearson <markpearson@lenovo.com>,
        =?ISO-8859-1?Q?Micka=EBl_Sala=FCn?= <mic@digikod.net>,
        Jarkko Sakkinen <jarkko@kernel.org>,
        David Howells <dhowells@redhat.com>,
        David Woodhouse <dwmw2@infradead.org>,
        keyrings@vger.kernel.org, linux-kernel@vger.kernel.org,
        linux-security-module <linux-security-module@vger.kernel.org>,
        linux-integrity@vger.kernel.org
Date:   Mon, 27 Feb 2023 09:42:39 +0800
In-Reply-To: <860048ca-d827-4319-9755-9b44ba3c4157@t-8ch.de>
References: <c8c65713-5cda-43ad-8018-20f2e32e4432@t-8ch.de>
         <af0d6881-76c0-f570-0c5b-f664e261c4cf@digikod.net>
         <632d2180-02f8-4a5f-803a-57a6443a60f4@t-8ch.de>
         <12ceffb8-4e90-4eb5-2110-a0e69b412cea@lenovo.com>
         <fec5e8eb3803068a11267f386ddda389a1211736.camel@codeconstruct.com.au>
         <860048ca-d827-4319-9755-9b44ba3c4157@t-8ch.de>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
User-Agent: Evolution 3.46.3-1 
MIME-Version: 1.0
Precedence: bulk

Hi Thomas,

> > Given there's (at least) a few months' worth of GA machines with
> > this issue, can we suppress the warning?
>=20
> In 6.3 this message will be downgraded to a warning.
> https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit=
/?id=3Dc95e8f6fd157b45ef0685c221931561e943e82da

Nice, thanks for that.

> A fixed firmware is still desirable, though.

Yep, definitely.

Not to discourage a firmware fix, but I could look at adding support to
one of the utils (mokutil?) to delete duplicate kek/db/dbx entries...

Cheers,


Jeremy