Skip to content

Commit

Permalink
linux-5.4.21-323: Select *Basic module for enforcing kernel lockdown*
Browse files Browse the repository at this point in the history
> SECURITY_LOCKDOWN_LSM
>
> Build support for an LSM that enforces a coarse kernel lockdown
> behaviour.

Do not enable it by default.

Fixes: #1710
  • Loading branch information
pmenzel committed Feb 21, 2020
1 parent 209285d commit 107e0fe
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion linux-5.4.21-323.bee
Original file line number Diff line number Diff line change
Expand Up @@ -834,14 +834,15 @@ mee_configure() {
CONFIG_NLS_ISO8859_1=m
CONFIG_NLS_UTF8=m
CONFIG_DLM=m
CONFIG_SECURITY=y
CONFIG_SECURITYFS=y
CONFIG_SECURITY_LOCKDOWN_LSM=y
CONFIG_CRYPTO_CTS=m
CONFIG_CRYPTO_ECB=y
CONFIG_CRYPTO_PCBC=y
CONFIG_CRYPTO_CMAC=y
CONFIG_CRYPTO_HMAC=y
CONFIG_CRYPTO_MD4=y
CONFIG_CRYPTO_SHA1=y
CONFIG_CRYPTO_SHA256=y
CONFIG_CRYPTO_AES=y
CONFIG_CRYPTO_ARC4=y
Expand Down

0 comments on commit 107e0fe

Please sign in to comment.