From: Ben Hutchings <ben@decadent.org.uk>
Date: Sat, 20 Apr 2019 23:17:13 +0000 (+0100)
Subject: lockdown: Refer to Debian wiki until manual page exists
X-Git-Tag: archive/raspbian/5.7.6-1+rpi1^2~22
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=90d953e2d2e93ee2cd8a70cbac0906925f1b4302;p=linux.git

lockdown: Refer to Debian wiki until manual page exists

Forwarded: not-needed

The lockdown denial log message currently refers to a
"kernel_lockdown.7" manual page, which is supposed to document it.
That manual page hasn't been accepted by the man-pages project and
doesn't even seem to have been submitted yet.  For now, refer to the
Debian wiki.


Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name lockdown-refer-to-debian-wiki-until-manual-page-exists.patch
---

diff --git a/security/lockdown/lockdown.c b/security/lockdown/lockdown.c
index f669cc680fc..33f8c4c6385 100644
--- a/security/lockdown/lockdown.c
+++ b/security/lockdown/lockdown.c
@@ -29,7 +29,7 @@ int lock_kernel_down(const char *where, enum lockdown_reason level)
 		return -EPERM;
 
 	kernel_locked_down = level;
-	pr_notice("Kernel is locked down from %s; see man kernel_lockdown.7\n",
+	pr_notice("Kernel is locked down from %s; see https://wiki.debian.org/SecureBoot\n",
 		  where);
 	return 0;
 }
@@ -63,7 +63,7 @@ static int lockdown_is_locked_down(enum lockdown_reason what)
 
 	if (kernel_locked_down >= what) {
 		if (lockdown_reasons[what])
-			pr_notice("Lockdown: %s: %s is restricted; see man kernel_lockdown.7\n",
+			pr_notice("Lockdown: %s: %s is restricted; see https://wiki.debian.org/SecureBoot\n",
 				  current->comm, lockdown_reasons[what]);
 		return -EPERM;
 	}