From: Frank Ch. Eigler <fche@redhat.com>
Date: Wed, 6 Aug 2014 23:27:18 +0000 (-0400)
Subject: stap.1: mention sysrq-x secureboot-disabling keystroke on some kernels
X-Git-Tag: release-2.6~68
X-Git-Url: https://sourceware.org/git/?a=commitdiff_plain;h=56d52f46f4e46e772a795f9bdbbeb49d1ca1e47e;p=systemtap.git

stap.1: mention sysrq-x secureboot-disabling keystroke on some kernels
---

diff --git a/man/stap.1 b/man/stap.1
index b4d126421..8b0062fa6 100644
--- a/man/stap.1
+++ b/man/stap.1
@@ -1804,10 +1804,12 @@ or
 .I stapusr
 groups.
 .PP
-If the current system has Secure Boot turned on in the UEFI firmware,
-all kernel modules must be signed. The systemtap compile server can
-sign modules with a MOK (Machine Owner Key) that it has in common with
-a client system. See the following wiki page for more details:
+If the current system has SecureBoot turned on in the UEFI firmware,
+all kernel modules must be signed.  (Some kernels may allow disabling
+SecureBoot long after booting with a key sequence such as SysRq-X,
+making it unnecessary to sign modules.)  The systemtap compile server
+can sign modules with a MOK (Machine Owner Key) that it has in common
+with a client system. See the following wiki page for more details:
 .PP
 .RS
 .nh