From 80a06c3fab7ef6dc4bc026856a81453b4a5eb242 Mon Sep 17 00:00:00 2001 From: Nils Freydank Date: Thu, 2 Sep 2021 00:15:06 +0200 Subject: [PATCH] pachyrhynchus-config: Support landlock --- pachyrhynchus-config | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pachyrhynchus-config b/pachyrhynchus-config index 7e941c8..7803e57 100644 --- a/pachyrhynchus-config +++ b/pachyrhynchus-config @@ -3549,11 +3549,11 @@ CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set -# CONFIG_SECURITY_LANDLOCK is not set +CONFIG_SECURITY_LANDLOCK=y # CONFIG_INTEGRITY is not set # CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set CONFIG_DEFAULT_SECURITY_DAC=y -CONFIG_LSM="lockdown,yama,safesetid" +CONFIG_LSM="landlock,lockdown,yama,safesetid" # # Kernel hardening options