On Thu, 2024-08-22 at 11:31 +0100, Patrick O'Callaghan wrote: > On Wed, 2024-08-21 at 11:34 +0100, Patrick O'Callaghan wrote: > > I keep getting this in the journal: > > > > Lockdown: systemd-logind: hibernation is restricted; see man > > kernel_lockdown.7 > > > > and a glance at the man page reveals that hibernation and secure > > boot > > don't play nice unless the swap image filesystem is encrypted. My > > immediate reaction is to disable Secure Boot, but I'd like to know > > if > > there's an easy workaround, bearing in mind that my system is set > > to > > hibernate overnight and wake up automatically in the morning, > > without > > me having to type in a password. > > I've disabled Secure Boot in the UEFI settings, but I'm still getting > the same error when trying to hibernate. Is there something else I > need > to do to tell Fedora that SB is disabled? Or maybe generate a new > initramfs? To follow up on this: $ cat /sys/kernel/security/lsm lockdown,capability,yama,selinux,bpf,landlock,ima,evm i.e. lockdown is still enabled, despite TPM being off and Secure Boot disabled in the UEFI settings. poc -- _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
