Source: linux
Severity: normal

Dear maintainer(s),
it seems that when Debian kernel images are booted under UEFI Secure
Boot, they unconditionally enable kernel lockdown, which (among other
things) unconditionally disables the ability to hibernate (suspend to
disk).

While I understand the reasoning behind this is that the suspended image
could be maliciously modified, this is not a concern for every user -
e.g. in my case the system suspends to a LUKS-encrypted swap partition.

Therefore I believe there should be a way for people to make use of
Secure Boot's boot image integrity guarantees while preserving the
ability to hibernate.

Cheers,