On Fri, May 26, 2023 at 2:20 PM Steve Grubb <sgrubb(a)redhat.com> wrote:
Hello,
I was poking around a F38 system to look over the Secure Boot certificates and
found something that may warrant attention.
I *suspect* this is all wrapped into the issue that
shims must now have/use NX support to be signed,
and that first requires the kernel patches that
support NX to be merged.
The thread about the NX requirement and the
kernel patch is included (although a bit hard
to find) in the ticket
https://bugzilla.redhat.com/show_bug.cgi?id=2113005
I do not know where in the process the kernel patch
currently is (last I knew, it was still in review).