Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
Sender: Alejandro Colomar <alx.mailinglists@gmail.com>
Subject: Re: [PATCH] kernel_lockdown.7: Remove description of lifting via
 SysRq (not upstream)
To:     dann frazier <dann.frazier@canonical.com>
Cc:     linux-kernel@vger.kernel.org,
        Pedro Principeza <pedro.principeza@canonical.com>,
        David Howells <dhowells@redhat.com>,
        Heinrich Schuchardt <xypron.glpk@gmx.de>,
        Michael Kerrisk <mtk.manpages@gmail.com>,
        linux-man@vger.kernel.org
References: <20210526173455.971103-1-dann.frazier@canonical.com>
From:   "Alejandro Colomar (man-pages)" <alx.manpages@gmail.com>
Message-ID: <7c25c60b-f1d0-be71-8a7d-f2cb1871daeb@gmail.com>
Date:   Thu, 27 May 2021 09:13:31 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
 Thunderbird/78.10.0
MIME-Version: 1.0
In-Reply-To: <20210526173455.971103-1-dann.frazier@canonical.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Precedence: bulk

Hello Dann,

On 5/26/21 7:34 PM, dann frazier wrote:
> The patch that implemented lockdown lifting via SysRq ended up getting
> dropped[*] before the feature was merged upstream. Having the feature
> documented but unsupported has caused some confusion for our users.
> 
> [*] http://archive.lwn.net:8080/linux-kernel/CACdnJuuxAM06TcnczOA6NwxhnmQUeqqm3Ma8btukZpuCS+dOqg@mail.gmail.com/
> 
> Signed-off-by: dann frazier <dann.frazier@canonical.com>

Patch applied.

Thanks,

Alex

> ---
>   man7/kernel_lockdown.7 | 6 ------
>   1 file changed, 6 deletions(-)
> 
> diff --git a/man7/kernel_lockdown.7 b/man7/kernel_lockdown.7
> index 30863de62..29ffd55c3 100644
> --- a/man7/kernel_lockdown.7
> +++ b/man7/kernel_lockdown.7
> @@ -33,12 +33,6 @@ where X indicates the process name and Y indicates what is restricted.
>   .PP
>   On an EFI-enabled x86 or arm64 machine, lockdown will be automatically enabled
>   if the system boots in EFI Secure Boot mode.
> -.PP
> -If the kernel is appropriately configured, lockdown may be lifted by typing
> -the appropriate sequence on a directly attached physical keyboard.
> -For x86 machines, this is
> -.IR SysRq+x .
> -.\"
>   .SS Coverage
>   When lockdown is in effect, a number of features are disabled or have their
>   use restricted.
> 


-- 
Alejandro Colomar
Linux man-pages comaintainer; https://www.kernel.org/doc/man-pages/
http://www.alejandro-colomar.es/