OpenSUSE Leap 15.3 Release Notes: Difference between revisions

Tags: Mobile edit Mobile web edit
Tags: Mobile edit Mobile web edit
Line 168: Line 168:
If you do not have the base pattern installed and are using any of these KMPs, we recommend installing the <code>openSUSE-signkey-cert</code> package manually. A system reboot is required. More information about this process and manual enrollment can be found at https://en.opensuse.org/SDB:NVIDIA_drivers#Secureboot.
If you do not have the base pattern installed and are using any of these KMPs, we recommend installing the <code>openSUSE-signkey-cert</code> package manually. A system reboot is required. More information about this process and manual enrollment can be found at https://en.opensuse.org/SDB:NVIDIA_drivers#Secureboot.


===Secure Boot: Third-Party Drivers Need to Be Properly Signed===
===Secure Boot: third-party drivers need to be properly signed===


openSUSE Leap 15.2 and later enable a kernel module signature check for third-party drivers (<code>CONFIG_MODULE_SIG=y</code>). This is an important security measure to avoid untrusted code running in the kernel.
openSUSE Leap 15.2 and later enable a kernel module signature check for third-party drivers (<code>CONFIG_MODULE_SIG=y</code>). This is an important security measure to avoid untrusted code running in the kernel.