[PATCH] kernel_lockdown.7: Remove description of lifting via SysRq (not upstream)

[PATCH] kernel_lockdown.7: Remove description of lifting via SysRq (not upstream)

[Alejandro Colomar]

From: dann frazier <dann.frazier@canonical.com>

The patch that implemented lockdown lifting via SysRq ended up getting
dropped[*] before the feature was merged upstream. Having the feature
documented but unsupported has caused some confusion for our users.

[*] http://archive.lwn.net:8080/linux-kernel/CACdnJuuxAM06TcnczOA6NwxhnmQUeqqm3Ma8btukZpuCS+dOqg@mail.gmail.com/

Signed-off-by: dann frazier <dann.frazier@canonical.com>
Cc: Heinrich Schuchardt <xypron.glpk@gmx.de>
Cc: David Howells <dhowells@redhat.com>
Cc: Pedro Principeza <pedro.principeza@canonical.com>
Cc: Randy Dunlap <rdunlap@infradead.org>
Cc: Kyle McMartin <kyle@redhat.com>
Cc: Matthew Garrett <mjg59@google.com>
Signed-off-by: Alejandro Colomar <alx.manpages@gmail.com>
---
 man7/kernel_lockdown.7 | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/man7/kernel_lockdown.7 b/man7/kernel_lockdown.7
index 30863de62..b0442b3b6 100644
--- a/man7/kernel_lockdown.7
+++ b/man7/kernel_lockdown.7
@@ -33,11 +33,6 @@ where X indicates the process name and Y indicates what is restricted.
 .PP
 On an EFI-enabled x86 or arm64 machine, lockdown will be automatically enabled
 if the system boots in EFI Secure Boot mode.
-.PP
-If the kernel is appropriately configured, lockdown may be lifted by typing
-the appropriate sequence on a directly attached physical keyboard.
-For x86 machines, this is
-.IR SysRq+x .
 .\"
 .SS Coverage
 When lockdown is in effect, a number of features are disabled or have their
-- 
2.31.1

Re: [PATCH] kernel_lockdown.7: Remove description of lifting via SysRq (not upstream)

[Michael Kerrisk (man-pages)]

Hello Alex, Dann,

On 5/27/21 7:13 PM, Alejandro Colomar wrote:
> From: dann frazier <dann.frazier@canonical.com>
> 
> The patch that implemented lockdown lifting via SysRq ended up getting
> dropped[*] before the feature was merged upstream. Having the feature
> documented but unsupported has caused some confusion for our users.
> 
> [*] http://archive.lwn.net:8080/linux-kernel/CACdnJuuxAM06TcnczOA6NwxhnmQUeqqm3Ma8btukZpuCS+dOqg@mail.gmail.com/
> 
> Signed-off-by: dann frazier <dann.frazier@canonical.com>
> Cc: Heinrich Schuchardt <xypron.glpk@gmx.de>
> Cc: David Howells <dhowells@redhat.com>
> Cc: Pedro Principeza <pedro.principeza@canonical.com>
> Cc: Randy Dunlap <rdunlap@infradead.org>
> Cc: Kyle McMartin <kyle@redhat.com>
> Cc: Matthew Garrett <mjg59@google.com>
> Signed-off-by: Alejandro Colomar <alx.manpages@gmail.com>

Thanks. Patch applied.

Cheers,

Michael

> ---
>  man7/kernel_lockdown.7 | 5 -----
>  1 file changed, 5 deletions(-)
> 
> diff --git a/man7/kernel_lockdown.7 b/man7/kernel_lockdown.7
> index 30863de62..b0442b3b6 100644
> --- a/man7/kernel_lockdown.7
> +++ b/man7/kernel_lockdown.7
> @@ -33,11 +33,6 @@ where X indicates the process name and Y indicates what is restricted.
>  .PP
>  On an EFI-enabled x86 or arm64 machine, lockdown will be automatically enabled
>  if the system boots in EFI Secure Boot mode.
> -.PP
> -If the kernel is appropriately configured, lockdown may be lifted by typing
> -the appropriate sequence on a directly attached physical keyboard.
> -For x86 machines, this is
> -.IR SysRq+x .
>  .\"
>  .SS Coverage
>  When lockdown is in effect, a number of features are disabled or have their
> 


-- 
Michael Kerrisk
Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/
Linux/UNIX System Programming Training: http://man7.org/training/

[PATCH] kernel_lockdown.7: Remove description of lifting via SysRq (not upstream)

[dann frazier]

The patch that implemented lockdown lifting via SysRq ended up getting
dropped[*] before the feature was merged upstream. Having the feature
documented but unsupported has caused some confusion for our users.

[*] http://archive.lwn.net:8080/linux-kernel/CACdnJuuxAM06TcnczOA6NwxhnmQUeqqm3Ma8btukZpuCS+dOqg@mail.gmail.com/

Signed-off-by: dann frazier <dann.frazier@canonical.com>
---
 man7/kernel_lockdown.7 | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/man7/kernel_lockdown.7 b/man7/kernel_lockdown.7
index 30863de62..29ffd55c3 100644
--- a/man7/kernel_lockdown.7
+++ b/man7/kernel_lockdown.7
@@ -33,12 +33,6 @@ where X indicates the process name and Y indicates what is restricted.
 .PP
 On an EFI-enabled x86 or arm64 machine, lockdown will be automatically enabled
 if the system boots in EFI Secure Boot mode.
-.PP
-If the kernel is appropriately configured, lockdown may be lifted by typing
-the appropriate sequence on a directly attached physical keyboard.
-For x86 machines, this is
-.IR SysRq+x .
-.\"
 .SS Coverage
 When lockdown is in effect, a number of features are disabled or have their
 use restricted.
-- 
2.31.1

Re: [PATCH] kernel_lockdown.7: Remove description of lifting via SysRq (not upstream)

[Alejandro Colomar (man-pages)]

Hello Dann,

On 5/26/21 7:34 PM, dann frazier wrote:
> The patch that implemented lockdown lifting via SysRq ended up getting
> dropped[*] before the feature was merged upstream. Having the feature
> documented but unsupported has caused some confusion for our users.
> 
> [*] http://archive.lwn.net:8080/linux-kernel/CACdnJuuxAM06TcnczOA6NwxhnmQUeqqm3Ma8btukZpuCS+dOqg@mail.gmail.com/
> 
> Signed-off-by: dann frazier <dann.frazier@canonical.com>

Patch applied.

Thanks,

Alex

> ---
>   man7/kernel_lockdown.7 | 6 ------
>   1 file changed, 6 deletions(-)
> 
> diff --git a/man7/kernel_lockdown.7 b/man7/kernel_lockdown.7
> index 30863de62..29ffd55c3 100644
> --- a/man7/kernel_lockdown.7
> +++ b/man7/kernel_lockdown.7
> @@ -33,12 +33,6 @@ where X indicates the process name and Y indicates what is restricted.
>   .PP
>   On an EFI-enabled x86 or arm64 machine, lockdown will be automatically enabled
>   if the system boots in EFI Secure Boot mode.
> -.PP
> -If the kernel is appropriately configured, lockdown may be lifted by typing
> -the appropriate sequence on a directly attached physical keyboard.
> -For x86 machines, this is
> -.IR SysRq+x .
> -.\"
>   .SS Coverage
>   When lockdown is in effect, a number of features are disabled or have their
>   use restricted.
> 


-- 
Alejandro Colomar
Linux man-pages comaintainer; https://www.kernel.org/doc/man-pages/
http://www.alejandro-colomar.es/