* [d-kernel] [PATCH un-def/sisyphus] config: Make landlock, lockdown, and bpf LSMs available by default
@ 2022-08-17 12:10 Vitaly Chikunov
2022-08-17 12:22 ` Alexey V. Vissarionov
0 siblings, 1 reply; 2+ messages in thread
From: Vitaly Chikunov @ 2022-08-17 12:10 UTC (permalink / raw)
To: devel-kernel
Signed-off-by: Vitaly Chikunov <vt@altlinux.org>
---
config | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/config b/config
index 79c51b3c8a22..d64168b48249 100644
--- a/config
+++ b/config
@@ -9889,7 +9889,7 @@ CONFIG_EVM_EXTRA_SMACK_XATTRS=y
# CONFIG_DEFAULT_SECURITY_SMACK is not set
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
CONFIG_DEFAULT_SECURITY_DAC=y
-CONFIG_LSM="yama,loadpin,safesetid,integrity,altha,kiosk"
+CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,bpf,altha,kiosk"
#
# Kernel hardening options
--
2.33.4
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [d-kernel] [PATCH un-def/sisyphus] config: Make landlock, lockdown, and bpf LSMs available by default
2022-08-17 12:10 [d-kernel] [PATCH un-def/sisyphus] config: Make landlock, lockdown, and bpf LSMs available by default Vitaly Chikunov
@ 2022-08-17 12:22 ` Alexey V. Vissarionov
0 siblings, 0 replies; 2+ messages in thread
From: Alexey V. Vissarionov @ 2022-08-17 12:22 UTC (permalink / raw)
To: ALT Linux kernel packages development
On 2022-08-17 15:10:12 +0300, Vitaly Chikunov wrote:
> -CONFIG_LSM="yama,loadpin,safesetid,integrity,altha,kiosk"
> +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,
> integrity,bpf,altha,kiosk"
Насчет altha полностью согласен, а вот kiosk лучше включать
явно (параметр ядра lsm=).
--
Alexey V. Vissarionov
gremlin ПРИ altlinux ТЧК org; +vii-cmiii-ccxxix-lxxix-xlii
GPG: 0D92F19E1C0DC36E27F61A29CD17E2B43D879005 @ hkp://keys.gnupg.net
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2022-08-17 12:22 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-08-17 12:10 [d-kernel] [PATCH un-def/sisyphus] config: Make landlock, lockdown, and bpf LSMs available by default Vitaly Chikunov
2022-08-17 12:22 ` Alexey V. Vissarionov
ALT Linux kernel packages development
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/devel-kernel/0 devel-kernel/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 devel-kernel devel-kernel/ http://lore.altlinux.org/devel-kernel \
devel-kernel@altlinux.org devel-kernel@altlinux.ru devel-kernel@altlinux.com
public-inbox-index devel-kernel
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.devel-kernel
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git