https://bugzilla.redhat.com/show_bug.cgi?id=1615744
Bug ID: 1615744
Summary: Kernel module signing instructions for Secure Boot
contain errors
Product: Fedora Documentation
Version: devel
Component: system-administrator's-guide
Severity: medium
Assignee: pbokoc(a)redhat.com
Reporter: adhenry.9(a)gmail.com
QA Contact: docs-qa(a)lists.fedoraproject.org
CC: swadeley(a)redhat.com
Description of problem:
At the following Documentation address:
https://docs.fedoraproject.org/en-US/fedora/f28/system-administrators-gui...
There are a couple of syntax errors regarding listing keyrings and signing a
kernel module.
How reproducible: every time
Steps to Reproduce:
1. Reference to "keyctl list %:.system_keyring" is deprecated and should
instead be:
keyctl list %:.builtin_trusted_keys
This can be verified by listing the keys:
cat /proc/keys | grep keyring
Note that this error is already discussed in Bug 1509714:
https://bugzilla.redhat.com/show_bug.cgi?id=1509714
2. Secondly, the script syntax for signing a kernel module is wrong. In the
documentation it says as follows:
~]# perl /usr/src/kernels/$(uname -r)/scripts/sign-file \
sha256 \
my_signing_key.priv \
my_signing_key_pub.der \
my_module.ko
Running the above gives this error:
Unrecognized character \ ; marked by <-- HERE after <-- HERE near column 1 at
/usr/src/linux/scripts/sign-file line 1.
But perl is no longer needed since kernel 4.3.3 and sign-file is now an
executable, so it should read like this:
~]# /usr/src/kernels/$(uname -r)/scripts/sign-file \
sha256 \
my_signing_key.priv \
my_signing_key_pub.der \
my_module.ko
Additional info:
--
You are receiving this mail because:
You are the QA Contact for the bug.