lockdown: Refer to Debian wiki until manual page exists
authorBen Hutchings <ben@decadent.org.uk>
Sat, 20 Apr 2019 23:17:13 +0000 (00:17 +0100)
committerSalvatore Bonaccorso <carnil@debian.org>
Wed, 24 Jun 2020 18:56:57 +0000 (19:56 +0100)
Forwarded: not-needed

The lockdown denial log message currently refers to a
"kernel_lockdown.7" manual page, which is supposed to document it.
That manual page hasn't been accepted by the man-pages project and
doesn't even seem to have been submitted yet.  For now, refer to the
Debian wiki.

Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name lockdown-refer-to-debian-wiki-until-manual-page-exists.patch

security/lockdown/lockdown.c

index f669cc680fcada2d71132b885dbf69c4a4ca3272..33f8c4c63854daf4b50dfbf0b5f181b2d3dcaa45 100644 (file)
@@ -29,7 +29,7 @@ int lock_kernel_down(const char *where, enum lockdown_reason level)
                return -EPERM;
 
        kernel_locked_down = level;
-       pr_notice("Kernel is locked down from %s; see man kernel_lockdown.7\n",
+       pr_notice("Kernel is locked down from %s; see https://wiki.debian.org/SecureBoot\n",
                  where);
        return 0;
 }
@@ -63,7 +63,7 @@ static int lockdown_is_locked_down(enum lockdown_reason what)
 
        if (kernel_locked_down >= what) {
                if (lockdown_reasons[what])
-                       pr_notice("Lockdown: %s: %s is restricted; see man kernel_lockdown.7\n",
+                       pr_notice("Lockdown: %s: %s is restricted; see https://wiki.debian.org/SecureBoot\n",
                                  current->comm, lockdown_reasons[what]);
                return -EPERM;
        }