pachyrhynchus-config: Support landlock
This commit is contained in:
parent
4ebf421944
commit
80a06c3fab
@ -3549,11 +3549,11 @@ CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
|
|||||||
# CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set
|
# CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set
|
||||||
CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y
|
CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y
|
||||||
# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
|
# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
|
||||||
# CONFIG_SECURITY_LANDLOCK is not set
|
CONFIG_SECURITY_LANDLOCK=y
|
||||||
# CONFIG_INTEGRITY is not set
|
# CONFIG_INTEGRITY is not set
|
||||||
# CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set
|
# CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set
|
||||||
CONFIG_DEFAULT_SECURITY_DAC=y
|
CONFIG_DEFAULT_SECURITY_DAC=y
|
||||||
CONFIG_LSM="lockdown,yama,safesetid"
|
CONFIG_LSM="landlock,lockdown,yama,safesetid"
|
||||||
|
|
||||||
#
|
#
|
||||||
# Kernel hardening options
|
# Kernel hardening options
|
||||||
|
Loading…
x
Reference in New Issue
Block a user