From: Ben Hutchings <ben@decadent.org.uk>
Date: Sat, 20 Apr 2019 23:17:13 +0000 (+0100)
Subject: lockdown: Refer to Debian wiki until manual page exists
X-Git-Tag: archive/raspbian/5.2.17-1+rpi1^2~24
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=a5052bbe911d9c2767c9302685025c175cb90796;p=linux.git

lockdown: Refer to Debian wiki until manual page exists

The lockdown denial log message currently refers to a
"kernel_lockdown.7" manual page, which is supposed to document it.
That manual page hasn't been accepted by the man-pages project and
doesn't even seem to have been submitted yet.  For now, refer to the
Debian wiki.


Gbp-Pq: Topic features/all/lockdown
Gbp-Pq: Name lockdown-refer-to-debian-wiki-until-manual-page-exists.patch
---

diff --git a/security/lock_down.c b/security/lock_down.c
index 4745278e0f3..b9787f4faa6 100644
--- a/security/lock_down.c
+++ b/security/lock_down.c
@@ -28,7 +28,7 @@ static void __init lock_kernel_down(const char *where)
 {
 	if (!kernel_locked_down) {
 		kernel_locked_down = true;
-		pr_notice("Kernel is locked down from %s; see man kernel_lockdown.7\n",
+		pr_notice("Kernel is locked down from %s; see https://wiki.debian.org/SecureBoot\n",
 			  where);
 	}
 }
@@ -60,7 +60,7 @@ void __init init_lockdown(void)
 bool __kernel_is_locked_down(const char *what, bool first)
 {
 	if (what && first && kernel_locked_down)
-		pr_notice("Lockdown: %s: %s is restricted; see man kernel_lockdown.7\n",
+		pr_notice("Lockdown: %s: %s is restricted; see https://wiki.debian.org/SecureBoot\n",
 			  current->comm, what);
 	return kernel_locked_down;
 }