From 66ca5039caebdb4daa4368e4a2e4bfbed869ad7c Mon Sep 17 00:00:00 2001 From: Nils Freydank Date: Tue, 7 Feb 2023 20:38:20 +0100 Subject: [PATCH] pygoscelis: Enable CONFIG_SECURITY_SMACK --- pygoscelis-config | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/pygoscelis-config b/pygoscelis-config index 9fccd96..4e93919 100644 --- a/pygoscelis-config +++ b/pygoscelis-config @@ -4812,13 +4812,17 @@ CONFIG_KEY_NOTIFICATIONS=y CONFIG_SECURITY_DMESG_RESTRICT=y CONFIG_SECURITY=y # CONFIG_SECURITYFS is not set -# CONFIG_SECURITY_NETWORK is not set +CONFIG_SECURITY_NETWORK=y +# CONFIG_SECURITY_NETWORK_XFRM is not set CONFIG_SECURITY_PATH=y CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y CONFIG_HARDENED_USERCOPY=y CONFIG_FORTIFY_SOURCE=y # CONFIG_STATIC_USERMODEHELPER is not set -# CONFIG_SECURITY_SMACK is not set +# CONFIG_SECURITY_SELINUX is not set +CONFIG_SECURITY_SMACK=y +# CONFIG_SECURITY_SMACK_BRINGUP is not set +# CONFIG_SECURITY_SMACK_APPEND_SIGNALS is not set # CONFIG_SECURITY_TOMOYO is not set # CONFIG_SECURITY_APPARMOR is not set # CONFIG_SECURITY_LOADPIN is not set @@ -4832,6 +4836,7 @@ CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y CONFIG_SECURITY_LANDLOCK=y # CONFIG_INTEGRITY is not set # CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set +# CONFIG_DEFAULT_SECURITY_SMACK is not set CONFIG_DEFAULT_SECURITY_DAC=y CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,bpf"