Vincent Batts 342e858d66 sys-kernel: make lockdown available ...

This will not be enabled by default, and still requires the "lockdown"
kernel parameter. Users can test by setting in
`/usr/share/oem/grub.cfg`:
```
set linux_append="lockdown=integrity"
```

After this is set, dmesg output you'll see:
```
[    0.000000] Kernel is locked down from command line; see man
kernel_lockdown.7
```

Signed-off-by: Vincent Batts <vbatts@kinvolk.io>

2020-09-08 13:22:51 -04:00

..

src/third_party/coreos-overlay

sys-kernel: make lockdown available

2020-09-08 13:22:51 -04:00