From 15a703c803b660f1a9648c15a63389fdd6fc407e Mon Sep 17 00:00:00 2001
From: Nils Freydank <nils.freydank@posteo.de>
Date: Tue, 3 Aug 2021 21:21:23 +0200
Subject: [PATCH] centro: Enable landlock

---
 centro-config | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/centro-config b/centro-config
index 3890885..c1164af 100644
--- a/centro-config
+++ b/centro-config
@@ -2885,7 +2885,7 @@ CONFIG_SECURITYFS=y
 CONFIG_SECURITY_NETWORK=y
 CONFIG_PAGE_TABLE_ISOLATION=y
 # CONFIG_SECURITY_NETWORK_XFRM is not set
-# CONFIG_SECURITY_PATH is not set
+CONFIG_SECURITY_PATH=y
 # CONFIG_INTEL_TXT is not set
 CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
 CONFIG_HARDENED_USERCOPY=y
@@ -2905,10 +2905,10 @@ CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
 # CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set
 CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y
 # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
-# CONFIG_SECURITY_LANDLOCK is not set
+CONFIG_SECURITY_LANDLOCK=y
 # CONFIG_INTEGRITY is not set
 CONFIG_DEFAULT_SECURITY_DAC=y
-CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity"
+CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity"
 
 #
 # Kernel hardening options