Bug 33303

Summary:	Kernel not compiled with SECURITY_LOCKDOWN_LSM thus fwupd does not work
Product:	Mageia	Reporter:	Vincent D <vincent.dema+mageia>
Component:	RPM Packages	Assignee:	Kernel and Drivers maintainers <kernel>
Status:	NEW ---	QA Contact:
Severity:	normal
Priority:	Normal
Version:	9
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	kernel-6.6.28-1.mga9.src.rpm	CVE:
Status comment:

Description Vincent D 2024-06-13 11:48:00 CEST

The command `fwupdtool security` returns the following error message: failed to get public key using /fpf/OemCred: generic failure [0xb].

Also all related tools (fwupd*) are not able to update any firmware. It seems the cause is that the kernel is not built with the option SECURITY_LOCKDOWN_LSM as it can be seen in the file (for instance) /boot/config-6.6.18-desktop-1.mga9:
# CONFIG_SECURITY_LOCKDOWN_LSM is not set

A related thread:
https://github.com/fwupd/fwupd/issues/5745

Comment 1 Lewis Smith 2024-06-13 21:14:28 CEST

Thank you for the report.
The thread you indicate is complicated, and seems extremely hardware specific.

Assigning to kernel.

Assignee: bugsquad => kernel