(In reply to Andrei Borzenkov from comment #5) > (In reply to Hendrik Woltersdorf from comment #2) > > Yes, I think, it is a regression. > > Kernel 5.0 is the first upstream kernel to import UEFI certificates for > module integrity check, so it is hardly can be called a regression unless > SUSE included those patches before. It's a good news for mainline kernel really supports MOK now. Finally...