generated from archlinux/template
FS#75102: Add integrity to LSM
This only initializes a cache which is used by IMA. So it does nothing useful. Still, we technically have the integrity LSM and this removes a footgun should IMA ever get enabled.
This commit is contained in:
2
config
2
config
@@ -10221,7 +10221,7 @@ CONFIG_INTEGRITY_AUDIT=y
|
||||
# CONFIG_DEFAULT_SECURITY_TOMOYO is not set
|
||||
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
|
||||
CONFIG_DEFAULT_SECURITY_DAC=y
|
||||
CONFIG_LSM="landlock,lockdown,yama,bpf"
|
||||
CONFIG_LSM="landlock,lockdown,yama,integrity,bpf"
|
||||
|
||||
#
|
||||
# Kernel hardening options
|
||||
|
||||
Reference in New Issue
Block a user