But the famed Linux developer is putting his security work into his own Linux tree without Linus Torvalds’ approval. When Matthew Garrett, well-known Linux kernel developer and ‎CoreOSprincipal security engineer, announced he was releasing a [Linux] kernel tree with patches that implement a BSD-style securelevel interface, I predicted people would say Garrett was forking Linux. I was right. They have. But, that’s not what Garrett is doing. …
He’s building his own kernel tree because “The securelevel feature is part of the work done to make Secure Boot meaningfully useful – verifying that you’re booting a signed kernel isn’t terribly useful if it’s then straightforward for that kernel to be modified at runtime.”
Read more at ZDNet Linux and Open Source
