From 31f9baea9889376f76d3fcd8333d24a140e7226e Mon Sep 17 00:00:00 2001
From: Dave Brolley <brolley@redhat.com>
Date: Thu, 17 Dec 2009 16:30:02 -0500
Subject: PR 10889: Reorganize client/server man pages. Document
 --unprivileged.

---
 stap.1.in | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

(limited to 'stap.1.in')

diff --git a/stap.1.in b/stap.1.in
index b6f79fe9..4be443b7 100644
--- a/stap.1.in
+++ b/stap.1.in
@@ -1032,11 +1032,21 @@ group; or
 .IP \(bu 4
 a member of the
 .I stapusr
-group.  Members of the
+group.
+.PP
+Members of the
 .I stapusr
-group can only use modules located in
+group can only use modules under the following conditions:
+.IP \(bu 4
+The module is located in
 the /lib/modules/VERSION/systemtap directory.  This directory
 must be owned by root and not be world writable.
+.IP \(bu 4
+The module has been signed by a trusted signer. Trusted signers are normally
+systemtap compile servers which sign modules when the --unprivileged option is
+specified by the client. See the
+.IR stap-server (8)
+manual page for a for more information.
 .PP
 The kernel modules generated by
 .I stap
@@ -1247,6 +1257,8 @@ unloading.
 .IR stapfuncs (3stap),
 .IR stapvars (3stap),
 .IR stapex (3stap),
+.IR stap-client (8),
+.IR stap-server (8),
 .IR awk (1),
 .IR gdb (1)
 
-- 
cgit