man/veritysetup-generator: document veritytab kernel command line option

diff --git a/man/systemd-veritysetup-generator.xml b/man/systemd-veritysetup-generator.xml
index f8a44c9cc075c080ddaa38cff9c4e51a612af47a..ca133eb506e5d64a0877b330d470b7a1d527b191 100644 (file)
--- a/man/systemd-veritysetup-generator.xml
+++ b/man/systemd-veritysetup-generator.xml
@@ -54,12 +54,24 @@
 
         <listitem><para>Takes a boolean argument. Defaults to <literal>yes</literal>. If
         <literal>no</literal>, disables the generator entirely. <varname>rd.systemd.verity=</varname> is
-        honored only by the initrd while <varname>systemd.verity=</varname> is honored by both the host
-        system and the initrd.</para>
+        honored only in the initrd while <varname>systemd.verity=</varname> is honored by both the main
+        system and in the initrd.</para>
 
         <xi:include href="version-info.xml" xpointer="v233"/></listitem>
       </varlistentry>
 
+      <varlistentry>
+        <term><varname>veritytab=</varname></term>
+        <term><varname>rd.veritytab=</varname></term>
+
+        <listitem><para>Takes a boolean argument. Defaults to <literal>yes</literal>. If
+        <literal>no</literal>, causes the generator to ignore any devices configured in
+        <filename>/etc/veritytab</filename>. <varname>rd.veritytab=</varname> is honored only in the initrd
+        while <varname>veritytab=</varname> is honored by both the main system and in the initrd.</para>
+
+        <xi:include href="version-info.xml" xpointer="v248"/></listitem>
+      </varlistentry>
+
       <varlistentry>
         <term><varname>roothash=</varname></term>