Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #274256

Re: X server blocked by SecureBoot

From Christian <chris@argonautx.net>
Newsgroups linux.debian.user
Subject Re: X server blocked by SecureBoot
Date 2024-11-03 22:10 +0100
Message-ID <JEQ1b-6qlR-7@gated-at.bofh.it> (permalink)
References <JDikV-5nSV-1@gated-at.bofh.it> <JDoqm-5s09-13@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

>> So far I couldn't see anything in my
>> cmdline which is kernel_lockdown related.
> If this means that you already looked into
>
>    /proc/cmdline
>
> then i am out of ideas why the kernel log reported
>>> [   47.042454] Lockdown: Xorg: raw io port access is restricted; see man
>>> kernel_lockdown.7

Turns out, the parameters for kernel_lockdown are fixed defined in 
include/config/auto.conf but can be enhanced by writing these rules to 
the kernel cmdline.

In /sys/kernel/security/lockdown can one see all activated components. 
But it looks that it's not possible to delete certain parameters. Which 
can be changed however is the state of kernel_lockdown in 
/sys/kernel/security/lockdown

>
> Well, it is not clear whether this is really the showstopper for Xorg
> on Nvidia's driver. There were error messages before the "Lockdown"
> message.
>
> Kevin Chadwick wrote:
>> Have you tried disabling secure boot?
> If this is possible then we would at least learn whether Secure Boot is
> the origin of the problem or just a red herring.
>
Well yes, and it's pretty confusing because I disabled secure boot, and 
the problems remained. Which makes me really clueless, because there is 
not much information left on the dmesg. Maybe its something with BIOS or 
ACPI? By adding loglevel=3 to the cmdline I got something more:

[    0.277298] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.SADX], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277301] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277304] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.SADS], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277306] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277306] ACPI: Skipping parse of AML opcode: OpcodeName 
unavailable (0x0014)
[    0.277307] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14._DSM], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277308] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277309] ACPI: Skipping parse of AML opcode: OpcodeName 
unavailable (0x0014)
[    0.277310] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.BTRT], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277311] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277312] ACPI: Skipping parse of AML opcode: OpcodeName 
unavailable (0x5B84)
[    0.277325] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.DBTR], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277326] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277327] ACPI: Skipping parse of AML opcode: OpcodeName 
unavailable (0x5B84)
[    0.277328] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14._PRR], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277329] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277329] ACPI: Skipping parse of AML opcode: OpcodeName 
unavailable (0x0014)
[    0.277330] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.BRDY], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277331] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277334] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.BGAP], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277335] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277337] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.BRDS], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277338] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277339] ACPI: Skipping parse of AML opcode: OpcodeName 
unavailable (0x0014)
[    0.277340] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.ECKY], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277341] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277342] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.ECKV], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277343] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277344] ACPI: Skipping parse of AML opcode: OpcodeName 
unavailable (0x0014)
[    0.277345] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.GPCX], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277346] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277349] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.GPC], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277350] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277351] ACPI: Skipping parse of AML opcode: OpcodeName 
unavailable (0x0014)
[    0.277352] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.GLAX], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277352] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277355] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.GLAI], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277356] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277356] ACPI: Skipping parse of AML opcode: OpcodeName 
unavailable (0x0014)
[    0.277357] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.BTLY], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277358] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277360] ACPI BIOS Error (bug): Failure creating named object 
[\_SB.PC00.XHCI.RHUB.HS14.BTLC], AE_ALREADY_EXISTS (20220331/dswload2-326)
[    0.277361] ACPI Error: AE_ALREADY_EXISTS, During name lookup/catalog 
(20220331/psobject-220)
[    0.277362] ACPI: Skipping parse of AML opcode: OpcodeName 
unavailable (0x0014)
[    0.278459] ACPI: 12 ACPI AML tables successfully acquired and loaded
[    0.284491] ACPI: Dynamic OEM Table Load:
[    0.284496] ACPI: SSDT 0xFFFF913A02036600 0001AB (v02 PmRef Cpu0Psd  
00003000 INTL 20200717)
[    0.284906] ACPI: \_SB_.PR00: _OSC native thermal LVT Acked

But most hits at $SEARCHENGINE showed this is nothing to worry. And I 
need to start a new thread anyway.

Has anyone any more successions ?

Thank you


BR Christian

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

X server blocked by SecureBoot Christian <chris@argonautx.net> - 2024-10-29 12:00 +0100
  Re: X server blocked by SecureBoot "Thomas Schmitt" <scdbackup@gmx.net> - 2024-10-29 14:10 +0100
    Re: X server blocked by SecureBoot Christian <chris@argonautx.net> - 2024-10-30 16:00 +0100
      Re: X server blocked by SecureBoot Timothy M Butterworth <timothy.m.butterworth@gmail.com> - 2024-10-30 16:40 +0100
        Re: X server blocked by SecureBoot Christian <chris@argonautx.net> - 2024-10-30 17:20 +0100
      Re: X server blocked by SecureBoot "Thomas Schmitt" <scdbackup@gmx.net> - 2024-10-30 22:30 +0100
        Re: X server blocked by SecureBoot Christian <chris@argonautx.net> - 2024-11-03 22:10 +0100
          Re: X server blocked by SecureBoot Jeffrey Walton <noloader@gmail.com> - 2024-11-03 22:20 +0100
  Re: X server blocked by SecureBoot Timothy M Butterworth <timothy.m.butterworth@gmail.com> - 2024-10-29 16:50 +0100
    Re: X server blocked by SecureBoot Kevin Chadwick <m8il1ists@gmail.com> - 2024-10-29 20:00 +0100
      Re: X server blocked by SecureBoot Stefan Monnier <monnier@iro.umontreal.ca> - 2024-10-29 20:30 +0100
      Re: X server blocked by SecureBoot Christian <chris@argonautx.net> - 2024-10-30 17:30 +0100
        Re: X server blocked by SecureBoot Kevin Chadwick <m8il1ists@gmail.com> - 2024-10-30 17:50 +0100
        Re: X server blocked by SecureBoot Jeffrey Walton <noloader@gmail.com> - 2024-10-30 18:00 +0100
    Re: X server blocked by SecureBoot Christian <chris@argonautx.net> - 2024-10-30 16:30 +0100
      Re: X server blocked by SecureBoot Timothy M Butterworth <timothy.m.butterworth@gmail.com> - 2024-10-30 17:00 +0100

csiph-web