Comment # 38 on bug 1173158 from Stefan Dirsch

(In reply to Martin Wilck from comment #35)
> And we also got it wrong in the release notes :-((
> 
> > https://doc.opensuse.org/release-notes/x86_64/openSUSE/Leap/15.2/#sec.driver.sig

> "Importantly, this affects NVIDIA or AMD graphics drivers from the manufacturer's repositories"

This sounds very confusing. As if AMD and NVIDIA would provide signed kernel
modules. They don't. They only provide a binary part, which gets built/linked
against a glue layer source during installation. 

> "Kernel Module Packages (KMPs) from the official openSUSE repositories are not affected, because the modules they contain
>  are signed with the openSUSE key."

Do we offer any openSUSE KMPs other than the one for NVIDIA? I doubt. And the
NVIDIA one is very special, because everything is build/linked on the target
system for legal reasons. Or are openSUSE Community repos not considered
official? Could be ...

> "Kernel modules that are not signed will be treated as being ���tainted���. Loading them will result in a warning message, but
>  they will function."

now proved to be a wrong assumption :-( 

> I have to confess I didn't test this myself, and what Michal said matched my
> shady memories how it used to behave when I last tried (+4y ago).

I haven't tested this either unfortunately. :-(