FS#75102: Add integrity to LSM

This only initializes a cache which is used by IMA. So it does nothing
useful. Still, we technically have the integrity LSM and this removes a
footgun should IMA ever get enabled.
This commit is contained in:
Jan Alexander Steffens
2022-06-19 20:12:32 +00:00
parent 2e8ca45bc9
commit 5f3729800f
2 changed files with 2 additions and 2 deletions

2
config
View File

@@ -10221,7 +10221,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_DEFAULT_SECURITY_TOMOYO is not set
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="landlock,lockdown,yama,bpf"
CONFIG_LSM="landlock,lockdown,yama,integrity,bpf"
#
# Kernel hardening options