desktop-virtualization-community-VDI-UDS-EnterpriseJOIN OUR COMMUNITY


Linux 5.4 brings Lockdown, a new security mode

Posted by UDS Enterprise TeamLinux 5.4 brings Lockdown, a new security mode 2019-11-25 UDS Enterprise TeamLinux 5.4 brings Lockdown, a new security mode

Linus Torvalds announced yesterday the availability of Linux 5.4. The latest stable version of this operating system comes with a new security function that has sparked the debate between different sectors of the community. Enabling Lockdown prevents even users with root permissions from making changes to the kernel code. Their opponents claim that it goes against the Open Source philosophy of this project and their supporters praise the security improvements promised by this system.


Lockdown comes locked by default and allows two lock modes: integrity and confidentiality. The first provides a full block, so it is impossible to make any modification in the kernel. The second adds one more limitation: all functions that allow to extract confidential information about the kernel are also totally blocked.

Another highlight of Linux 5.4 is the native support of exFAT, the new Microsoft file system that accelerates file transfer, even with large multimedia files.

In addition, graphics performance has been improved by adding support for AMD Radeon Navi 12 and 14 GPUs, AMD Radeon Arcturus GPUs and AMU Dali APU.

Support has also been improved by adding new functions and features for AMD Ryzen 3000 series CPUs and AMD EPYC microprocessors.

Among the rest of the Linux 5.4 enhancements are the compatibility with Intel Tiger Lake CPUs, Qualcomm Snapdragon 855 SoCs, support for Intel Lightning Mountain SoC, improved application memory management on Android and a new high-performance virtio controller to share files.

The list of all the news is available in the announcement made by Linus Torvalds and in Kernelnewbies.



You must authenticate to review this post