commit 284416e904b3f405cb3ae4220aa79dc61c94236a
Author: Frank Ch. Eigler <fche@redhat.com>
Date: Wed Nov 12 11:04:39 2014 -0500
RHBZ1119336: document STAP_FIPS_OVERRIDE in man staprun.8
diff --git a/staprun/staprun.8 b/staprun/staprun.8
index b6f014e..82e2e22 100644
--- a/staprun/staprun.8
+++ b/staprun/staprun.8
@@ -279,6 +279,16 @@ Part of the privilege enforcement mechanism may require using a
stap-server and administrative trust in its cryptographic signer; see the
.IR stap\-server (8)
manual page for a for more information.
+
+.PP
+On a kernel with FIPS mode enabled, staprun normally refuses to attempt to
+load systemtap-generated kernel modules. This is because on some kernels,
+this results in a panic. If your kernel includes corrections such as
+linux commit #002c77a48b47, then you can force staprun to attempt module
+loads anyway, by setting the
+.BR STAP\_FIPS\_OVERRIDE
+environment variable to any value.
+
.SH FILES
.TP
/lib/modules/VERSION/systemtap
@@ -288,6 +298,7 @@ Users who are only in the
group can install modules
located in this directory. This directory must be owned by the root
user and not be world writable.
+
.SH SEE ALSO
.IR stap (1),
.IR stapprobes (3stap),