Skip to content

Commit 1acf11f

Browse files
hiowaguyDaniel Kiper
authored and
Daniel Kiper
committed
docs: Capture additional commands restricted by lockdown
Update documentation to capture that all memrw commands, the minicmd dump command, and raw memory dumping via hexdump are restricted when lockdown is enabled. This aligns to recent GRUB code updates. Signed-off-by: Andrew Hamilton <[email protected]> Reviewed-by: Daniel Kiper <[email protected]>
1 parent 6a168af commit 1acf11f

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

docs/grub.texi

+9
Original file line numberDiff line numberDiff line change
@@ -5124,6 +5124,8 @@ This module provides support for commands @command{read_byte},
51245124
write data to physical memory (addresses). The "read" commands accept one
51255125
parameter to specify the source address. The "write" commands require either two
51265126
or three parameters, with the order: address, value, <optional mask>.
5127+
Note: The commands provided by this module are not allowed when lockdown is
5128+
enforced (@pxref{Lockdown}).
51275129

51285130
@node memtools_module
51295131
@section memtools
@@ -5137,6 +5139,8 @@ including: @command{cat}, @command{help}, @command{dump}, @command{rmmod},
51375139
@command{lsmod}, and @command{exit}. The version of the commands in this module
51385140
are similar to their full-fledged counterparts implemented in other GRUB
51395141
modules.
5142+
Note: The @command{dump} command is not allowed when lockdown is enforced
5143+
(@pxref{Lockdown}).
51405144

51415145
@node minix_module
51425146
@section minix
@@ -7196,6 +7200,11 @@ to be shown.
71967200

71977201
If given the special device named @samp{(mem)}, then the @samp{offset} given to
71987202
@option{--skip} is treated as the address of a memory location to dump from.
7203+
7204+
Note: The dumping of RAM memory (by the (mem) argument) is not allowed when
7205+
when lockdown is enforced (@pxref{Lockdown}). The dumping of disk or file
7206+
data is allowed when lockdown is enforced.
7207+
71997208
@end deffn
72007209

72017210

0 commit comments

Comments
 (0)