[packages/kernel] sync default lsm list

atler atler at pld-linux.org
Sun Feb 9 14:48:14 CET 2025


commit 88f99ef0721df9135e7f431429b9d67789030b5c
Author: Jan Palus <atler at pld-linux.org>
Date:   Sun Feb 9 14:00:29 2025 +0100

    sync default lsm list
    
    not updated since its introduction in 5.1 resulting in ie landlock not
    being available in default setup

 kernel-multiarch.config | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
---
diff --git a/kernel-multiarch.config b/kernel-multiarch.config
index d32c0a5e..b79a7fd5 100644
--- a/kernel-multiarch.config
+++ b/kernel-multiarch.config
@@ -15464,7 +15464,7 @@ DEFAULT_SECURITY_SMACK all=n
 DEFAULT_SECURITY_TOMOYO all=n
 DEFAULT_SECURITY_APPARMOR=n
 DEFAULT_SECURITY_DAC all=y
-LSM all="yama,loadpin,safesetid,integrity"
+LSM all="landlock,lockdown,yama,loadpin,safesetid,ipe,bpf"
 #- file security/Kconfig.hardening goes here
 
 #-
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/kernel.git/commitdiff/88f99ef0721df9135e7f431429b9d67789030b5c



More information about the pld-cvs-commit mailing list