pachyrhynchus-config: Support landlock

This commit is contained in:
Nils Freydank 2021-09-02 00:15:06 +02:00
parent 4ebf421944
commit 80a06c3fab
Signed by: nfr
GPG Key ID: 0F1DEAB2D36AD112
1 changed files with 2 additions and 2 deletions

View File

@ -3549,11 +3549,11 @@ CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
# CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set
CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y
# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
# CONFIG_SECURITY_LANDLOCK is not set
CONFIG_SECURITY_LANDLOCK=y
# CONFIG_INTEGRITY is not set
# CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="lockdown,yama,safesetid"
CONFIG_LSM="landlock,lockdown,yama,safesetid"
#
# Kernel hardening options