From 107e0feaee6e604dd707665d615eb7023c92a268 Mon Sep 17 00:00:00 2001 From: Paul Menzel Date: Fri, 21 Feb 2020 12:40:32 +0100 Subject: [PATCH] linux-5.4.21-323: Select *Basic module for enforcing kernel lockdown* > SECURITY_LOCKDOWN_LSM > > Build support for an LSM that enforces a coarse kernel lockdown > behaviour. Do not enable it by default. Fixes: https://github.molgen.mpg.de/mariux64/bee-files/issues/1710 --- linux-5.4.21-323.bee | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/linux-5.4.21-323.bee b/linux-5.4.21-323.bee index 1ec8d5956..f3e207667 100755 --- a/linux-5.4.21-323.bee +++ b/linux-5.4.21-323.bee @@ -834,14 +834,15 @@ mee_configure() { CONFIG_NLS_ISO8859_1=m CONFIG_NLS_UTF8=m CONFIG_DLM=m + CONFIG_SECURITY=y CONFIG_SECURITYFS=y + CONFIG_SECURITY_LOCKDOWN_LSM=y CONFIG_CRYPTO_CTS=m CONFIG_CRYPTO_ECB=y CONFIG_CRYPTO_PCBC=y CONFIG_CRYPTO_CMAC=y CONFIG_CRYPTO_HMAC=y CONFIG_CRYPTO_MD4=y - CONFIG_CRYPTO_SHA1=y CONFIG_CRYPTO_SHA256=y CONFIG_CRYPTO_AES=y CONFIG_CRYPTO_ARC4=y