Re: [d-kernel] [PATCH] [6.12] config: add selinux to CONFIG_LSM

From: Anton Midyukov <antohami@altlinux.org>
To: devel-kernel@lists.altlinux.org
Subject: Re: [d-kernel] [PATCH] [6.12] config: add selinux to CONFIG_LSM
Date: Wed, 13 May 2026 15:19:15 +0300
Message-ID: <cace5c03-e052-466d-b885-0a5b66c06e30@altlinux.org> (raw)
In-Reply-To: <ab6hAat5UnFyf6SC@altlinux.org>

21.03.2026 16:46, Vitaly Chikunov пишет:
> On Tue, Mar 03, 2026 at 05:39:05PM +0300, Anton Midyukov wrote:
>> This is necessary to use Selinux.
>> Alternatively, can enable it in the kernel cmdline:
>>   lsm=selinux,lockdown,capability,landlock,yama,safesetid,bpf,kiosk,ima,evm
>> But this clutters the kernel cmdline.
>> Signed-off-by: Anton Midyukov <antohami@altlinux.org>
> 
> Applied, thanks.
> 
> Только передвинул selinux после integrity.
> 

Прошу включить и в 6.18.

>> ---
>>  config | 2 +-
>>  1 file changed, 1 insertion(+), 1 deletion(-)
>>
>> diff --git a/config b/config
>> index 76dcac8f970d..ba51640d2b4f 100644
>> --- a/config
>> +++ b/config
>> @@ -10125,7 +10125,7 @@ CONFIG_EVM_EXTRA_SMACK_XATTRS=y
>>  # CONFIG_DEFAULT_SECURITY_SMACK is not set
>>  # CONFIG_DEFAULT_SECURITY_APPARMOR is not set
>>  CONFIG_DEFAULT_SECURITY_DAC=y
>> -CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,bpf,altha,kiosk"
>> +CONFIG_LSM="selinux,landlock,lockdown,yama,loadpin,safesetid,integrity,bpf,altha,kiosk"
>>  
>>  #
>>  # Kernel hardening options
>> -- 
>> 2.50.1
>>
>> _______________________________________________
>> devel-kernel mailing list
>> devel-kernel@lists.altlinux.org
>> https://lists.altlinux.org/mailman/listinfo/devel-kernel
> _______________________________________________
> devel-kernel mailing list
> devel-kernel@lists.altlinux.org
> https://lists.altlinux.org/mailman/listinfo/devel-kernel

-- 
best regards, Anton Midyukov <antohami@altlinux.org>