lockdown: Refer to Debian wiki until manual page exists
authorBen Hutchings <ben@decadent.org.uk>
Sat, 20 Apr 2019 23:17:13 +0000 (00:17 +0100)
committerSalvatore Bonaccorso <carnil@debian.org>
Thu, 26 Sep 2019 12:19:06 +0000 (13:19 +0100)
The lockdown denial log message currently refers to a
"kernel_lockdown.7" manual page, which is supposed to document it.
That manual page hasn't been accepted by the man-pages project and
doesn't even seem to have been submitted yet.  For now, refer to the
Debian wiki.

Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name lockdown-refer-to-debian-wiki-until-manual-page-exists.patch

security/lock_down.c

index 4745278e0f3bbb7bb9624e6e29b8f668692e1d61..b9787f4faa60675b772088bbee4739353d87125a 100644 (file)
@@ -28,7 +28,7 @@ static void __init lock_kernel_down(const char *where)
 {
        if (!kernel_locked_down) {
                kernel_locked_down = true;
-               pr_notice("Kernel is locked down from %s; see man kernel_lockdown.7\n",
+               pr_notice("Kernel is locked down from %s; see https://wiki.debian.org/SecureBoot\n",
                          where);
        }
 }
@@ -60,7 +60,7 @@ void __init init_lockdown(void)
 bool __kernel_is_locked_down(const char *what, bool first)
 {
        if (what && first && kernel_locked_down)
-               pr_notice("Lockdown: %s: %s is restricted; see man kernel_lockdown.7\n",
+               pr_notice("Lockdown: %s: %s is restricted; see https://wiki.debian.org/SecureBoot\n",
                          current->comm, what);
        return kernel_locked_down;
 }