From 8a751769bc89faf6b11d29f7f401faf9b5af3e38 Mon Sep 17 00:00:00 2001
From: slowpeek <slowpeek@users.noreply.github.com>
Date: Sun, 26 Feb 2023 18:49:32 +0200
Subject: [PATCH] man: add "--trust-mok" and "--untrust-mok"

---
 man/mokutil.1 | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/man/mokutil.1 b/man/mokutil.1
index 4260a7e8..5618d0e1 100644
--- a/man/mokutil.1
+++ b/man/mokutil.1
@@ -81,6 +81,10 @@ mokutil \- utility to manipulate machine owner keys
 .br
 \fBmokutil\fR [--timeout \fI-1,0..0x7fff\fR]
 .br
+\fBmokutil\fR [--trust-mok]
+.br
+\fBmokutil\fR [--untrust-mok]
+.br
 
 .SH DESCRIPTION
 \fBmokutil\fR is a tool to import or delete the machines owner keys
@@ -203,3 +207,9 @@ databases.
 \fB--ignore-keyring\fR
 Ignore the kernel builtin trusted keys keyring check when enrolling a key into MokList
 .TP
+\fB--trust-mok\fR
+Trust MOK keys within the kernel keyring
+.TP
+\fB--untrust-mok\fR
+Do not trust MOK keys within the kernel keyring
+.TP