changelog: Add entry for kernel lockdown changes

Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
This commit is contained in:
Jeremi Piotrowski 2024-09-10 11:37:03 +02:00
parent 5a2c5c61a8
commit 7b8f43756c

View File

@ -0,0 +1 @@
- Kernel lockdown in integrity mode is now enabled when secure boot is enabled. This prevents loading unsigned kernel modules and matches the behavior of all major distros. ([scripts#2299](https://github.com/flatcar/scripts/pull/2299))