mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-10 11:05:54 +02:00
linux: Properly load Landlock module
Fixes: #13645 Tested-by: Peter Müller <peter.mueller@ipfire.org> Signed-off-by: Peter Müller <peter.mueller@ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
This commit is contained in:
committed by
Arne Fitzenreiter
parent
eebce7d9a3
commit
5fea15ef76
@@ -8066,7 +8066,7 @@ CONFIG_INTEGRITY=y
|
||||
# CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set
|
||||
# CONFIG_EVM is not set
|
||||
CONFIG_DEFAULT_SECURITY_DAC=y
|
||||
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity,bpf"
|
||||
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,bpf"
|
||||
|
||||
#
|
||||
# Kernel hardening options
|
||||
|
||||
@@ -6745,7 +6745,7 @@ CONFIG_INTEGRITY=y
|
||||
# CONFIG_IMA is not set
|
||||
# CONFIG_EVM is not set
|
||||
CONFIG_DEFAULT_SECURITY_DAC=y
|
||||
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity,bpf"
|
||||
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,bpf"
|
||||
|
||||
#
|
||||
# Kernel hardening options
|
||||
|
||||
@@ -7252,7 +7252,7 @@ CONFIG_INTEGRITY=y
|
||||
# CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set
|
||||
# CONFIG_EVM is not set
|
||||
CONFIG_DEFAULT_SECURITY_DAC=y
|
||||
CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity,bpf"
|
||||
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,bpf"
|
||||
|
||||
#
|
||||
# Kernel hardening options
|
||||
|
||||
Reference in New Issue
Block a user