1eaae5d53f
Enabling IMA makes it impossible to load unsigned kernel modules when secure boot is in use, and without shim in the boot you can't get the kernel to trust a local key for module signing. This reverts commit 6a241232a3275ef3e314b5b7167e13fffff71282.