Update kernel-parameters.txt to reflect new deferred signature
verification.
Enhances boot speed by allowing unsigned modules in initrd after
bootloader check.

Signed-off-by: Alessandro Carminati (Red Hat) <alessandro.carmin...@gmail.com>
---
 Documentation/admin-guide/kernel-parameters.txt | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/Documentation/admin-guide/kernel-parameters.txt 
b/Documentation/admin-guide/kernel-parameters.txt
index 0c38a8af95ce..beec86f0dd05 100644
--- a/Documentation/admin-guide/kernel-parameters.txt
+++ b/Documentation/admin-guide/kernel-parameters.txt
@@ -3410,6 +3410,15 @@
                        Note that if CONFIG_MODULE_SIG_FORCE is set, that
                        is always true, so this option does nothing.
 
+       module_sig_check_wait=
+                       This parameter enables delayed activation of module
+                       signature checks, deferring the process until userspace
+                       triggers it. Once activated, this setting becomes
+                       permanent and cannot be reversed. This feature proves
+                       valuable for incorporating unsigned modules within
+                       initrd, especially after bootloader verification.
+                       By employing this option, boot times can be quicker.
+
        module_blacklist=  [KNL] Do not load a comma-separated list of
                        modules.  Useful for debugging problem modules.
 
-- 
2.34.1

Reply via email to