[packages/kernel] sync default lsm list
atler
atler at pld-linux.org
Sun Feb 9 14:48:14 CET 2025
commit 88f99ef0721df9135e7f431429b9d67789030b5c
Author: Jan Palus <atler at pld-linux.org>
Date: Sun Feb 9 14:00:29 2025 +0100
sync default lsm list
not updated since its introduction in 5.1 resulting in ie landlock not
being available in default setup
kernel-multiarch.config | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
---
diff --git a/kernel-multiarch.config b/kernel-multiarch.config
index d32c0a5e..b79a7fd5 100644
--- a/kernel-multiarch.config
+++ b/kernel-multiarch.config
@@ -15464,7 +15464,7 @@ DEFAULT_SECURITY_SMACK all=n
DEFAULT_SECURITY_TOMOYO all=n
DEFAULT_SECURITY_APPARMOR=n
DEFAULT_SECURITY_DAC all=y
-LSM all="yama,loadpin,safesetid,integrity"
+LSM all="landlock,lockdown,yama,loadpin,safesetid,ipe,bpf"
#- file security/Kconfig.hardening goes here
#-
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/kernel.git/commitdiff/88f99ef0721df9135e7f431429b9d67789030b5c
More information about the pld-cvs-commit
mailing list