Skip to content

Commit 18e0991

Browse files
edwintorokyonghong-song
authored andcommitted
Secure Boot: physical keypress to disable lockdown
Ubuntu 19.10 with secure boot enabled doesn't allow the kernel lockdown to be lifted by echo, even from root: ``` # echo 1 > /proc/sys/kernel/sysrq # echo x > /proc/sysrq-trigger ``` dmesg says: ``` This sysrq operation is disabled from userspace. ``` I pressed Alt-PrtScr-x and that worked: ``` sysrq: Disabling Secure Boot restrictions Lifting lockdown ``` I can now run eBPF tools, such as execsnoop-bpfcc.
1 parent 03e0d26 commit 18e0991

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

FAQ.txt

+7
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,13 @@ A: The so-called Kernel lockdown might be the root cause. Try disabling it with
2929
echo 1 > /proc/sys/kernel/sysrq
3030
echo x > /proc/sysrq-trigger
3131
Also see https://github.com/iovisor/bcc/issues/2525
32+
33+
If you have Secure Boot enabled you need to press Alt-PrintScr-x on the keyboard instead:
34+
```
35+
This sysrq operation is disabled from userspace.
36+
sysrq: Disabling Secure Boot restrictions
37+
Lifting lockdown
38+
```
3239

3340
Q: How do I fulfill the Linux kernel version requirement?
3441
A: You need to obtain a recent version of the Linux source code

0 commit comments

Comments
 (0)