On fedora 37, I am trying to enable kernel log messages for wireguard by executing this command in a root-shell:
echo module wireguard +p > /sys/kernel/debug/dynamic_debug/control
Unfortunately, this results in an error: operation not permitted: /sys/kernel/debug/dynamic_debug/control
.
I can see in dmesg that the reason for this error is: debugfs access is restricted; see man kernel_lockdown.7
.
Kernel lockdown is automatically enabled due to secure boot being enabled.
Is there any other way to enable the wireguard log messages with secure boot / kernel lockdown enabled, e.g. via kernel cmdline or modprobe options?