[PATCH] loadpin: Fix stale KEXEC_VERIFY_SIG reference in documentation

[PATCH] loadpin: Fix stale KEXEC_VERIFY_SIG reference in documentation

[Karl Mehltretter]

Commit 99d5cadfde2b ("kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG
and KEXEC_SIG_FORCE") removed CONFIG_KEXEC_VERIFY_SIG but left the
LoadPin documentation pointing at it. Refer to CONFIG_KEXEC_SIG instead.

While at it, clean up the grammar of the sentence.

Fixes: 99d5cadfde2b ("kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE")
Assisted-by: LLM
Signed-off-by: Karl Mehltretter <kmehltretter@gmail.com>
---
 Documentation/admin-guide/LSM/LoadPin.rst | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/Documentation/admin-guide/LSM/LoadPin.rst b/Documentation/admin-guide/LSM/LoadPin.rst
index dd3ca68b5df1..a90fd9dac960 100644
--- a/Documentation/admin-guide/LSM/LoadPin.rst
+++ b/Documentation/admin-guide/LSM/LoadPin.rst
@@ -23,9 +23,9 @@ sysctl allows for easy testing on systems with a mutable filesystem.)
 It's also possible to exclude specific file types from LoadPin using kernel
 command line option "``loadpin.exclude``". By default, all files are
 included, but they can be excluded using kernel command line option such
-as "``loadpin.exclude=kernel-module,kexec-image``". This allows to use
+as "``loadpin.exclude=kernel-module,kexec-image``". This allows using
 different mechanisms such as ``CONFIG_MODULE_SIG`` and
-``CONFIG_KEXEC_VERIFY_SIG`` to verify kernel module and kernel image while
-still use LoadPin to protect the integrity of other files kernel loads. The
-full list of valid file types can be found in ``kernel_read_file_str``
-defined in ``include/linux/kernel_read_file.h``.
+``CONFIG_KEXEC_SIG`` to verify kernel modules and kernel images while
+still using LoadPin to protect the integrity of other files the kernel
+loads. The full list of valid file types can be found in
+``kernel_read_file_str`` defined in ``include/linux/kernel_read_file.h``.
-- 
2.53.0

Re: [PATCH] loadpin: Fix stale KEXEC_VERIFY_SIG reference in documentation

[Randy Dunlap]

On 9/4/26 6:36 PM, Karl Mehltretter wrote:
> Commit 99d5cadfde2b ("kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG
> and KEXEC_SIG_FORCE") removed CONFIG_KEXEC_VERIFY_SIG but left the
> LoadPin documentation pointing at it. Refer to CONFIG_KEXEC_SIG instead.
> 
> While at it, clean up the grammar of the sentence.
> 
> Fixes: 99d5cadfde2b ("kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE")
> Assisted-by: LLM
> Signed-off-by: Karl Mehltretter <kmehltretter@gmail.com>

Reviewed-by: Randy Dunlap <rdunlap@infradead.org>
Thanks.

> ---
>  Documentation/admin-guide/LSM/LoadPin.rst | 10 +++++-----
>  1 file changed, 5 insertions(+), 5 deletions(-)
> 
> diff --git a/Documentation/admin-guide/LSM/LoadPin.rst b/Documentation/admin-guide/LSM/LoadPin.rst
> index dd3ca68b5df1..a90fd9dac960 100644
> --- a/Documentation/admin-guide/LSM/LoadPin.rst
> +++ b/Documentation/admin-guide/LSM/LoadPin.rst
> @@ -23,9 +23,9 @@ sysctl allows for easy testing on systems with a mutable filesystem.)
>  It's also possible to exclude specific file types from LoadPin using kernel
>  command line option "``loadpin.exclude``". By default, all files are
>  included, but they can be excluded using kernel command line option such
> -as "``loadpin.exclude=kernel-module,kexec-image``". This allows to use
> +as "``loadpin.exclude=kernel-module,kexec-image``". This allows using
>  different mechanisms such as ``CONFIG_MODULE_SIG`` and
> -``CONFIG_KEXEC_VERIFY_SIG`` to verify kernel module and kernel image while
> -still use LoadPin to protect the integrity of other files kernel loads. The
> -full list of valid file types can be found in ``kernel_read_file_str``
> -defined in ``include/linux/kernel_read_file.h``.
> +``CONFIG_KEXEC_SIG`` to verify kernel modules and kernel images while
> +still using LoadPin to protect the integrity of other files the kernel
> +loads. The full list of valid file types can be found in
> +``kernel_read_file_str`` defined in ``include/linux/kernel_read_file.h``.

-- 
~Randy