Jan Alexander Steffens d7bf404c33 FS#71270: Don't enable "bpf" LSM by default ...

It provides all possible hooks, which makes it harder to properly use
major LSMs. Using security= to enable a major LSM puts it at the end of
the list. Some functions (like security_getprocattr) only use the first
matching hook, thus prefer bpf.

2021-06-16 22:13:34 +00:00

6.1 KiB

Raw Blame History

View Raw