Linux 4.7 Releases

  • Linux Planet reports that the latest kernel, Linux 4.7, has released.

    The biggest new feature is LoadPin Security, an idea taken from ChromeOS.

    "This LSM enforces that kernel-loaded files (modules, firmware, etc) must all come from the same filesystem, with the expectation that such a filesystem is backed by a read-only device such as dm-verity or CDROM... This allows systems that have a verified and/or unchangeable filesystem to enforce module and firmware loading restrictions without needing to sign the files individually." -- Loadpin Commit