stap.1: mention sysrq-x secureboot-disabling keystroke on some kernels

diff --git a/man/stap.1 b/man/stap.1
index b4d1264213fde242e60f0edc29b1148011b7dffc..8b0062fa65cd163734d9552dfa9dc84dd26f825d 100644 (file)
--- a/man/stap.1
+++ b/man/stap.1
@@ -1804,10 +1804,12 @@ or
 .I stapusr
 groups.
 .PP
-If the current system has Secure Boot turned on in the UEFI firmware,
-all kernel modules must be signed. The systemtap compile server can
-sign modules with a MOK (Machine Owner Key) that it has in common with
-a client system. See the following wiki page for more details:
+If the current system has SecureBoot turned on in the UEFI firmware,
+all kernel modules must be signed.  (Some kernels may allow disabling
+SecureBoot long after booting with a key sequence such as SysRq-X,
+making it unnecessary to sign modules.)  The systemtap compile server
+can sign modules with a MOK (Machine Owner Key) that it has in common
+with a client system. See the following wiki page for more details:
 .PP
 .RS
 .nh