From: Vitaly Chikunov <vt@altlinux.org>
To: ALT Linux kernel packages development <devel-kernel@lists.altlinux.org>
Subject: Re: [d-kernel] [PATCH] [6.12] config: add selinux to CONFIG_LSM
Date: Thu, 14 May 2026 05:30:14 +0300
Message-ID: <agUzc9Fb4pxKjQnw@altlinux.org> (raw)
In-Reply-To: <cace5c03-e052-466d-b885-0a5b66c06e30@altlinux.org>
Anton,
On Wed, May 13, 2026 at 03:19:15PM +0300, Anton Midyukov wrote:
> 21.03.2026 16:46, Vitaly Chikunov пишет:
> > On Tue, Mar 03, 2026 at 05:39:05PM +0300, Anton Midyukov wrote:
> >> This is necessary to use Selinux.
> >> Alternatively, can enable it in the kernel cmdline:
> >> lsm=selinux,lockdown,capability,landlock,yama,safesetid,bpf,kiosk,ima,evm
> >> But this clutters the kernel cmdline.
> >> Signed-off-by: Anton Midyukov <antohami@altlinux.org>
> >
> > Applied, thanks.
> >
> > Только передвинул selinux после integrity.
> >
>
> Прошу включить и в 6.18.
Picked, thanks
aefaa98ad5f1 N net/netlabel: Add mark s0 flag for NetLabel subsystem (6.12)
aee1f8b1f607 N config: add selinux to CONFIG_LSM
>
> >> ---
> >> config | 2 +-
> >> 1 file changed, 1 insertion(+), 1 deletion(-)
> >>
> >> diff --git a/config b/config
> >> index 76dcac8f970d..ba51640d2b4f 100644
> >> --- a/config
> >> +++ b/config
> >> @@ -10125,7 +10125,7 @@ CONFIG_EVM_EXTRA_SMACK_XATTRS=y
> >> # CONFIG_DEFAULT_SECURITY_SMACK is not set
> >> # CONFIG_DEFAULT_SECURITY_APPARMOR is not set
> >> CONFIG_DEFAULT_SECURITY_DAC=y
> >> -CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,bpf,altha,kiosk"
> >> +CONFIG_LSM="selinux,landlock,lockdown,yama,loadpin,safesetid,integrity,bpf,altha,kiosk"
> >>
> >> #
> >> # Kernel hardening options
> >> --
> >> 2.50.1
> >>
> >> _______________________________________________
> >> devel-kernel mailing list
> >> devel-kernel@lists.altlinux.org
> >> https://lists.altlinux.org/mailman/listinfo/devel-kernel
> > _______________________________________________
> > devel-kernel mailing list
> > devel-kernel@lists.altlinux.org
> > https://lists.altlinux.org/mailman/listinfo/devel-kernel
>
> --
> best regards, Anton Midyukov <antohami@altlinux.org>
>
> _______________________________________________
> devel-kernel mailing list
> devel-kernel@lists.altlinux.org
> https://lists.altlinux.org/mailman/listinfo/devel-kernel
next prev parent reply other threads:[~2026-05-14 2:30 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-03-03 14:39 Anton Midyukov
2026-03-21 13:46 ` Vitaly Chikunov
2026-05-13 12:19 ` Anton Midyukov
2026-05-14 2:30 ` Vitaly Chikunov [this message]
2026-05-14 14:09 ` Ivan A. Melnikov
2026-05-15 7:24 ` Vitaly Chikunov
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=agUzc9Fb4pxKjQnw@altlinux.org \
--to=vt@altlinux.org \
--cc=devel-kernel@lists.altlinux.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux kernel packages development
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/devel-kernel/0 devel-kernel/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 devel-kernel devel-kernel/ http://lore.altlinux.org/devel-kernel \
devel-kernel@altlinux.org devel-kernel@altlinux.ru devel-kernel@altlinux.com
public-inbox-index devel-kernel
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.devel-kernel
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git