centro: Enable landlock
This commit is contained in:
parent
0931f47365
commit
15a703c803
@ -2885,7 +2885,7 @@ CONFIG_SECURITYFS=y
|
||||
CONFIG_SECURITY_NETWORK=y
|
||||
CONFIG_PAGE_TABLE_ISOLATION=y
|
||||
# CONFIG_SECURITY_NETWORK_XFRM is not set
|
||||
# CONFIG_SECURITY_PATH is not set
|
||||
CONFIG_SECURITY_PATH=y
|
||||
# CONFIG_INTEL_TXT is not set
|
||||
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
|
||||
CONFIG_HARDENED_USERCOPY=y
|
||||
@ -2905,10 +2905,10 @@ CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
|
||||
# CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set
|
||||
CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y
|
||||
# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
|
||||
# CONFIG_SECURITY_LANDLOCK is not set
|
||||
CONFIG_SECURITY_LANDLOCK=y
|
||||
# CONFIG_INTEGRITY is not set
|
||||
CONFIG_DEFAULT_SECURITY_DAC=y
|
||||
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity"
|
||||
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity"
|
||||
|
||||
#
|
||||
# Kernel hardening options
|
||||
|
Loading…
x
Reference in New Issue
Block a user