From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-4.3 required=5.0 tests=ALL_TRUSTED,BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,RP_MATCHES_RCVD autolearn=unavailable autolearn_force=no version=3.4.1 Date: Wed, 17 Aug 2022 15:22:29 +0300 From: "Alexey V. Vissarionov" To: ALT Linux kernel packages development Message-ID: <20220817122229.GA12153@altlinux.org> References: <20220817121012.1994642-1-vt@altlinux.org> MIME-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20220817121012.1994642-1-vt@altlinux.org> Subject: Re: [d-kernel] [PATCH un-def/sisyphus] config: Make landlock, lockdown, and bpf LSMs available by default X-BeenThere: devel-kernel@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Linux kernel packages development List-Id: ALT Linux kernel packages development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Aug 2022 12:22:35 -0000 Archived-At: List-Archive: List-Post: On 2022-08-17 15:10:12 +0300, Vitaly Chikunov wrote: > -CONFIG_LSM="yama,loadpin,safesetid,integrity,altha,kiosk" > +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid, > integrity,bpf,altha,kiosk" Насчет altha полностью согласен, а вот kiosk лучше включать явно (параметр ядра lsm=). -- Alexey V. Vissarionov gremlin ПРИ altlinux ТЧК org; +vii-cmiii-ccxxix-lxxix-xlii GPG: 0D92F19E1C0DC36E27F61A29CD17E2B43D879005 @ hkp://keys.gnupg.net