[d-kernel] [PATCH] [6.12] config: add selinux to CONFIG_LSM

[d-kernel] [PATCH] [6.12] config: add selinux to CONFIG_LSM

[Anton Midyukov]

This is necessary to use Selinux.
Alternatively, can enable it in the kernel cmdline:
  lsm=selinux,lockdown,capability,landlock,yama,safesetid,bpf,kiosk,ima,evm
But this clutters the kernel cmdline.
Signed-off-by: Anton Midyukov <antohami@altlinux.org>
---
 config | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config b/config
index 76dcac8f970d..ba51640d2b4f 100644
--- a/config
+++ b/config
@@ -10125,7 +10125,7 @@ CONFIG_EVM_EXTRA_SMACK_XATTRS=y
 # CONFIG_DEFAULT_SECURITY_SMACK is not set
 # CONFIG_DEFAULT_SECURITY_APPARMOR is not set
 CONFIG_DEFAULT_SECURITY_DAC=y
-CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,bpf,altha,kiosk"
+CONFIG_LSM="selinux,landlock,lockdown,yama,loadpin,safesetid,integrity,bpf,altha,kiosk"
 
 #
 # Kernel hardening options
-- 
2.50.1

Re: [d-kernel] [PATCH] [6.12] config: add selinux to CONFIG_LSM

[Vitaly Chikunov]

On Tue, Mar 03, 2026 at 05:39:05PM +0300, Anton Midyukov wrote:
> This is necessary to use Selinux.
> Alternatively, can enable it in the kernel cmdline:
>   lsm=selinux,lockdown,capability,landlock,yama,safesetid,bpf,kiosk,ima,evm
> But this clutters the kernel cmdline.
> Signed-off-by: Anton Midyukov <antohami@altlinux.org>

Applied, thanks.

Только передвинул selinux после integrity.

> ---
>  config | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/config b/config
> index 76dcac8f970d..ba51640d2b4f 100644
> --- a/config
> +++ b/config
> @@ -10125,7 +10125,7 @@ CONFIG_EVM_EXTRA_SMACK_XATTRS=y
>  # CONFIG_DEFAULT_SECURITY_SMACK is not set
>  # CONFIG_DEFAULT_SECURITY_APPARMOR is not set
>  CONFIG_DEFAULT_SECURITY_DAC=y
> -CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,bpf,altha,kiosk"
> +CONFIG_LSM="selinux,landlock,lockdown,yama,loadpin,safesetid,integrity,bpf,altha,kiosk"
>  
>  #
>  # Kernel hardening options
> -- 
> 2.50.1
> 
> _______________________________________________
> devel-kernel mailing list
> devel-kernel@lists.altlinux.org
> https://lists.altlinux.org/mailman/listinfo/devel-kernel