Put lockdown LSM into default initialization list

2020-04-06 22:36:28 +00:00
parent d917c0fbc9
commit f4bf2c8d61
2 changed files with 2 additions and 2 deletions
--- a/2
+++ b/2
@@ -10021,7 +10021,7 @@ CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
 # CONFIG_DEFAULT_SECURITY_TOMOYO is not set
 # CONFIG_DEFAULT_SECURITY_APPARMOR is not set
 CONFIG_DEFAULT_SECURITY_DAC=y
-CONFIG_LSM="yama"
+CONFIG_LSM="lockdown,yama"

 #
 # Kernel hardening options