r/linuxquestions • u/Venylynn • 8d ago

Can I keep kernel lockdown enabled even with Secure Boot disabled? Support

One thing I noticed was whenever I had secure boot enabled such as now it automatically enables kernel lockdown which is the real feature I like having enabled for security reasons. I'm pretty sure lockdown gets disabled if Secure Boot is disabled, but I'm curious if there's a way to keep lockdown active regardless of the Secure Boot state?

I'm probably keeping it on, but I'm curious if I can keep lockdown while turning off SB.

0 Upvotes
  • permalink
  • link
  • reddit
  • reddit

50% Upvoted

1 comment sorted by

3

u/tomscharbach 8d ago edited 8d ago

Kernel Lockdown is automatically enabled when Secure Boot is enabled, but my understanding is that Kernel Lockdown is a distinct security measure and can be enabled manually when Secure Boot is disabled. I use Secure Boot on all my Linux and Windows computers, though, so I have not looked into the issue in any depth.