you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 5 hours ago

As I understand the current intended implementation and constraints: no. Anything not signed with keys trusted by EACv2 will prevent it from running if loaded. Your MOK while fubctional for secure boot, won't be on the list of trusted keys. Additionally, if MOK-signed modules were allowed, it largely defeats the security model EAC seems to be expecting. Ultimately, if your distro's kernel is trusted by EAC, they would also need to either bundle or provide non-dkms signed builds of the kernel module you need.

  • source