From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from canpmsgout05.his.huawei.com (canpmsgout05.his.huawei.com [113.46.200.220]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 3845F3ACEF9; Thu, 5 Feb 2026 11:48:05 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=113.46.200.220 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1770292087; cv=none; b=bX52Pzmote+11WvqJhrkwNch7c0SPVcTH+mZyFoFBp8D+XkO74ZTBbJP5qBZfv5K6zEOWjDRLB56dEXRz1jJjHr9NBLibKGpwTo4CahpLF2BWnmrccBXYDQuciPEJGVHCQ+DXvxVdxYqB3VICifnM0lb6AY8dj7xREBR+fLD1sM= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1770292087; c=relaxed/simple; bh=R8ouFOvIM3YEyVU3FyhmSkSI84Ktl1xT8Ezkm5sftRU=; h=Message-ID:Date:MIME-Version:Subject:To:CC:References:From: In-Reply-To:Content-Type; b=cNVMR1c0J5dPGF4zARsaVPBWHlQKEQwubgUzCJUsPIVxNt0YjZVIhGtJGxT+XGmyp6r+MUtkjP+hg9Pk6sjDGzSyg/s78lV5mnGV1p+wFgdgnJNaQfHaT3j3wAQJRIJzOIiNBp+WoX5CRtvevPMRBTc9sNKHV3xTCVzJaV+6yTI= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=huawei.com; spf=pass smtp.mailfrom=huawei.com; dkim=pass (1024-bit key) header.d=huawei.com header.i=@huawei.com header.b=HORYpC/o; arc=none smtp.client-ip=113.46.200.220 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=huawei.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=huawei.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=huawei.com header.i=@huawei.com header.b="HORYpC/o" dkim-signature: v=1; a=rsa-sha256; d=huawei.com; s=dkim; c=relaxed/relaxed; q=dns/txt; h=From; bh=cGgOyeoTNoxsN6zJ2XO4mcwfb4d8rRz67JRHDhtG3aA=; b=HORYpC/oBlWO1M/4fN1DXnfKvdA5U0gMFJyn25nzbATYWtOnkjXQoWRtVAngeXlZhvLJX1QyN xvqhY0AGe9o9fk2gy9GUHyi6u8EJRnaYprhHsX5FWrhlU9fLIUEhMPtwvdXZ1AeHbfMyEcZ++T4 v4HgmPHInBpUpaNtY5wNW6Y= Received: from mail.maildlp.com (unknown [172.19.163.104]) by canpmsgout05.his.huawei.com (SkyGuard) with ESMTPS id 4f6Fk54Fkzz12LDg; Thu, 5 Feb 2026 19:44:13 +0800 (CST) Received: from kwepemj100004.china.huawei.com (unknown [7.202.195.249]) by mail.maildlp.com (Postfix) with ESMTPS id 22450404AD; Thu, 5 Feb 2026 19:48:03 +0800 (CST) Received: from [10.34.206.51] (10.34.206.51) by kwepemj100004.china.huawei.com (7.202.195.249) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.36; Thu, 5 Feb 2026 19:48:02 +0800 Message-ID: Date: Thu, 5 Feb 2026 19:48:02 +0800 Precedence: bulk X-Mailing-List: linux-security-module@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH] man/man7/kernel_lockdown.7: remove Secure Boot untruth To: Alyssa Ross , Alejandro Colomar CC: Heinrich Schuchardt , David Howells , Nicolas Bouchinet , , References: <20260203195001.20131-1-hi@alyssa.is> From: Xiu Jianfeng In-Reply-To: <20260203195001.20131-1-hi@alyssa.is> Content-Type: text/plain; charset="UTF-8"; format=flowed Content-Transfer-Encoding: 7bit X-ClientProxiedBy: kwepems100002.china.huawei.com (7.221.188.206) To kwepemj100004.china.huawei.com (7.202.195.249) On 2/4/2026 3:50 AM, Alyssa Ross wrote: > This is true for Fedora, where this page was sourced from, but I don't > believe it has ever been true for the mainline kernel, because Linus > rejected it. Yeah, I also found this issue not long ago, but I haven't had time to submit a fix patch yet. > > Link: https://bbs.archlinux.org/viewtopic.php?pid=2088704#p2088704 > Link: https://lore.kernel.org/lkml/CA+55aFzYbpRAdma0PvqE+9ygySuKzNKByqOzzMufBoovXVnfPw@mail.gmail.com/ > Fixes: bb509e6fc ("kernel_lockdown.7: New page documenting the Kernel Lockdown feature") > Signed-off-by: Alyssa Ross I am not sure if appropriate to add my ACK here, if needed, feel free to add: Acked-by: Xiu Jianfeng > --- > man/man7/kernel_lockdown.7 | 3 --- > 1 file changed, 3 deletions(-) > > diff --git a/man/man7/kernel_lockdown.7 b/man/man7/kernel_lockdown.7 > index 5090484ea..5986c8f01 100644 > --- a/man/man7/kernel_lockdown.7 > +++ b/man/man7/kernel_lockdown.7 > @@ -23,9 +23,6 @@ Lockdown: X: Y is restricted, see man kernel_lockdown.7 > .in > .P > where X indicates the process name and Y indicates what is restricted. > -.P > -On an EFI-enabled x86 or arm64 machine, lockdown will be automatically enabled > -if the system boots in EFI Secure Boot mode. > .\" > .SS Coverage > When lockdown is in effect, a number of features are disabled or have their