Blame SOURCES/rhbz1119335.patch
|
 |
fab312 |
commit 284416e904b3f405cb3ae4220aa79dc61c94236a
|
|
|
fab312 |
Author: Frank Ch. Eigler <fche@redhat.com>
|
|
|
fab312 |
Date: Wed Nov 12 11:04:39 2014 -0500
|
|
|
fab312 |
|
|
|
fab312 |
RHBZ1119336: document STAP_FIPS_OVERRIDE in man staprun.8
|
|
|
fab312 |
|
|
|
fab312 |
diff --git a/staprun/staprun.8 b/staprun/staprun.8
|
|
|
fab312 |
index b6f014e..82e2e22 100644
|
|
|
fab312 |
--- a/staprun/staprun.8
|
|
|
fab312 |
+++ b/staprun/staprun.8
|
|
|
fab312 |
@@ -279,6 +279,16 @@ Part of the privilege enforcement mechanism may require using a
|
|
|
fab312 |
stap-server and administrative trust in its cryptographic signer; see the
|
|
|
fab312 |
.IR stap\-server (8)
|
|
|
fab312 |
manual page for a for more information.
|
|
|
fab312 |
+
|
|
|
fab312 |
+.PP
|
|
|
fab312 |
+On a kernel with FIPS mode enabled, staprun normally refuses to attempt to
|
|
|
fab312 |
+load systemtap-generated kernel modules. This is because on some kernels,
|
|
|
fab312 |
+this results in a panic. If your kernel includes corrections such as
|
|
|
fab312 |
+linux commit #002c77a48b47, then you can force staprun to attempt module
|
|
|
fab312 |
+loads anyway, by setting the
|
|
|
fab312 |
+.BR STAP\_FIPS\_OVERRIDE
|
|
|
fab312 |
+environment variable to any value.
|
|
|
fab312 |
+
|
|
|
fab312 |
.SH FILES
|
|
|
fab312 |
.TP
|
|
|
fab312 |
/lib/modules/VERSION/systemtap
|
|
|
fab312 |
@@ -288,6 +298,7 @@ Users who are only in the
|
|
|
fab312 |
group can install modules
|
|
|
fab312 |
located in this directory. This directory must be owned by the root
|
|
|
fab312 |
user and not be world writable.
|
|
|
fab312 |
+
|
|
|
fab312 |
.SH SEE ALSO
|
|
|
fab312 |
.IR stap (1),
|
|
|
fab312 |
.IR stapprobes (3stap),
|