Skip to main content
Unix & Linux

Return to Answer

Add advantages of doing this vs the other answer.
Source Link
Kelvie Wong
Kelvie Wong
  • 31
  • 2

Here's a patch I quickly wrote and have been using:

https://gist.github.com/kelvie/917d456cb572325aae8e3bd94a9c1350

I also ran into this setting up my Framework laptop with almost the same setup.

I have an encrypted swap (and encrypted RAM enabled), so with this patch you should understand the risks before adding lockdown_hibernate to your kernel params and forcing it to enable hibernate during lockdown.

The advantage of this vs just disabling lockdown altogether is that you still get the majority of the other protections that lockdown mode affords, albeit it's a moot point if someone can get your kernel to load from a compromised swap.

Here's a patch I quickly wrote and have been using:

https://gist.github.com/kelvie/917d456cb572325aae8e3bd94a9c1350

I also ran into this setting up my Framework laptop with almost the same setup.

I have an encrypted swap (and encrypted RAM enabled), so with this patch you should understand the risks before adding lockdown_hibernate to your kernel params and forcing it to enable hibernate during lockdown.

Here's a patch I quickly wrote and have been using:

https://gist.github.com/kelvie/917d456cb572325aae8e3bd94a9c1350

I also ran into this setting up my Framework laptop with almost the same setup.

I have an encrypted swap (and encrypted RAM enabled), so with this patch you should understand the risks before adding lockdown_hibernate to your kernel params and forcing it to enable hibernate during lockdown.

The advantage of this vs just disabling lockdown altogether is that you still get the majority of the other protections that lockdown mode affords, albeit it's a moot point if someone can get your kernel to load from a compromised swap.

Source Link
Kelvie Wong
Kelvie Wong
  • 31
  • 2

Here's a patch I quickly wrote and have been using:

https://gist.github.com/kelvie/917d456cb572325aae8e3bd94a9c1350

I also ran into this setting up my Framework laptop with almost the same setup.

I have an encrypted swap (and encrypted RAM enabled), so with this patch you should understand the risks before adding lockdown_hibernate to your kernel params and forcing it to enable hibernate during lockdown.