Vincent Batts 342e858d66 sys-kernel: make lockdown available ... This will not be enabled by default, and still requires the "lockdown" kernel parameter. Users can test by setting in `/usr/share/oem/grub.cfg`: ``` set linux_append="lockdown=integrity" ``` After this is set, dmesg output you'll see: ``` [ 0.000000] Kernel is locked down from command line; see man kernel_lockdown.7 ``` Signed-off-by: Vincent Batts <vbatts@kinvolk.io>		2020-09-08 13:22:51 -04:00
..
src/third_party/coreos-overlay	sys-kernel: make lockdown available	2020-09-08 13:22:51 -04:00