Hi, Upstream tree has below commits recently: commit ea93102f32244e3f45c8b26260be77ed0cc1d16c Author: Yannik Sembritzki <yannik@xxxxxxxxxxxxx> Date: Thu Aug 16 14:05:23 2018 +0100 Fix kexec forbidding kernels signed with keys in the secondary keyring to boot commit 817aef260037f33ee0f44c17fe341323d3aebd6d Author: Yannik Sembritzki <yannik@xxxxxxxxxxxxx> Date: Thu Aug 16 14:05:10 2018 +0100 Replace magic for trusting the secondary keyring with #define After a rebase below patch can be dropped: kexec-bzimage-verify-pe-signature-fix.patch Thanks Dave _______________________________________________ kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx/message/5NLPK6MZXMGVZUU3D6Y5VREFLJVTX3EN/