MODSIGN: Fix documentation of signed-nokey behavior when not enforcing.
jwboyer's previous commit changes the behavior of module signing when
there's a valid signature but we don't know the public key and are in
permissive mode. This updates the documentation to match.
Signed-off-by: Peter Jones <pjones@redhat.com>
Acked-by: Josh Boyer <jwboyer@redhat.com>
Signed-off-by: David Howells <dhowells@redhat.com>
diff --git a/Documentation/module-signing.txt b/Documentation/module-signing.txt
index b355aa2..2549536 100644
--- a/Documentation/module-signing.txt
+++ b/Documentation/module-signing.txt
@@ -174,7 +174,7 @@
MODULE STATE PERMISSIVE MODE ENFORCING MODE
======================================= =============== ===============
Unsigned Ok EKEYREJECTED
- Signed, no public key ENOKEY ENOKEY
+ Signed, no public key Ok ENOKEY
Validly signed, public key Ok Ok
Invalidly signed, public key EKEYREJECTED EKEYREJECTED
Validly signed, expired key EKEYEXPIRED EKEYEXPIRED