lockdown: Refer to Debian wiki until manual page exists
authorBen Hutchings <ben@decadent.org.uk>
Sat, 20 Apr 2019 23:17:13 +0000 (00:17 +0100)
committerBen Hutchings <benh@debian.org>
Tue, 9 Jun 2020 17:50:00 +0000 (18:50 +0100)
Forwarded: not-needed

The lockdown denial log message currently refers to a
"kernel_lockdown.7" manual page, which is supposed to document it.
That manual page hasn't been accepted by the man-pages project and
doesn't even seem to have been submitted yet.  For now, refer to the
Debian wiki.

Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name lockdown-refer-to-debian-wiki-until-manual-page-exists.patch

security/lockdown/lockdown.c

index d76f2767c622544cb7f48653de874874abe29029..9f5c8b0ca4d2c68b912d64da5fe6db9daedae1f6 100644 (file)
@@ -29,7 +29,7 @@ int lock_kernel_down(const char *where, enum lockdown_reason level)
                return -EPERM;
 
        kernel_locked_down = level;
-       pr_notice("Kernel is locked down from %s; see man kernel_lockdown.7\n",
+       pr_notice("Kernel is locked down from %s; see https://wiki.debian.org/SecureBoot\n",
                  where);
        return 0;
 }
@@ -63,7 +63,7 @@ static int lockdown_is_locked_down(enum lockdown_reason what)
 
        if (kernel_locked_down >= what) {
                if (lockdown_reasons[what])
-                       pr_notice("Lockdown: %s: %s is restricted; see man kernel_lockdown.7\n",
+                       pr_notice("Lockdown: %s: %s is restricted; see https://wiki.debian.org/SecureBoot\n",
                                  current->comm, lockdown_reasons[what]);
                return -EPERM;
        }