feat(dracut): add --sbat option to add sbat policy to UKI

[thirdparty/dracut.git] / man / dracut.conf.5.asc

diff --git a/man/dracut.conf.5.asc b/man/dracut.conf.5.asc
index dbeaf4d879374d2037191422feaf2782be4bdcdf..905274c67de52876267f29f25b25bb40afc58c9c 100644 (file)
--- a/man/dracut.conf.5.asc
+++ b/man/dracut.conf.5.asc
@@ -302,6 +302,11 @@ Logging levels:
     default is _/lib/modules/<KERNEL-VERSION>/vmlinuz_ or
     _/boot/vmlinuz-<KERNEL-VERSION>_.
 
+*sbat=*"__parameters__"::
+    Specifies the SBAT parameters, which to include in the UEFI executable. By default
+    the default SBAT string added is "sbat,1,SBAT Version,sbat,1,
+    https://github.com/rhboot/shim/blob/main/SBAT.md".
+
 *enhanced_cpio=*"__{yes|no}__"::
     Attempt to use the dracut-cpio binary, which optimizes archive creation for
     copy-on-write filesystems (default=no).