Re: [PATCH] loadpin: Fix stale KEXEC_VERIFY_SIG reference in documentation

From: Randy Dunlap

Date: Fri Sep 04 2026 - 22:40:53 EST




On 9/4/26 6:36 PM, Karl Mehltretter wrote:
> Commit 99d5cadfde2b ("kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG
> and KEXEC_SIG_FORCE") removed CONFIG_KEXEC_VERIFY_SIG but left the
> LoadPin documentation pointing at it. Refer to CONFIG_KEXEC_SIG instead.
>
> While at it, clean up the grammar of the sentence.
>
> Fixes: 99d5cadfde2b ("kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE")
> Assisted-by: LLM
> Signed-off-by: Karl Mehltretter <kmehltretter@xxxxxxxxx>

Reviewed-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
Thanks.

> ---
> Documentation/admin-guide/LSM/LoadPin.rst | 10 +++++-----
> 1 file changed, 5 insertions(+), 5 deletions(-)
>
> diff --git a/Documentation/admin-guide/LSM/LoadPin.rst b/Documentation/admin-guide/LSM/LoadPin.rst
> index dd3ca68b5df1..a90fd9dac960 100644
> --- a/Documentation/admin-guide/LSM/LoadPin.rst
> +++ b/Documentation/admin-guide/LSM/LoadPin.rst
> @@ -23,9 +23,9 @@ sysctl allows for easy testing on systems with a mutable filesystem.)
> It's also possible to exclude specific file types from LoadPin using kernel
> command line option "``loadpin.exclude``". By default, all files are
> included, but they can be excluded using kernel command line option such
> -as "``loadpin.exclude=kernel-module,kexec-image``". This allows to use
> +as "``loadpin.exclude=kernel-module,kexec-image``". This allows using
> different mechanisms such as ``CONFIG_MODULE_SIG`` and
> -``CONFIG_KEXEC_VERIFY_SIG`` to verify kernel module and kernel image while
> -still use LoadPin to protect the integrity of other files kernel loads. The
> -full list of valid file types can be found in ``kernel_read_file_str``
> -defined in ``include/linux/kernel_read_file.h``.
> +``CONFIG_KEXEC_SIG`` to verify kernel modules and kernel images while
> +still using LoadPin to protect the integrity of other files the kernel
> +loads. The full list of valid file types can be found in
> +``kernel_read_file_str`` defined in ``include/linux/kernel_read_file.h``.

--
~Randy