From: pbrobinson on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/922#note_524345964 So Lockdown LSM is now upstream and it's the vast majority of the implementation of UEFI secure boot. Then Fedora/ARK has a minor patchset on top of that for UEFI secure boot. Downstream el8 would use a different patch set. _______________________________________________ kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure