snailed/void-packages
2
0
Fork 0
Code Issues 1 Pull requests 2 Activity Actions

linux5.15+: Add landlock to CONFIG_LSM

Browse source
This commit is contained in:
Albert Schwarzkopf 2022-12-29 00:01:04 +01:00 • committed by Đoàn Trần Công Danh
parent f389e5416d
commit 661f17ea74
18 changed files with 18 additions and 18 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
srcpkgs/linux5.15/files/arm64-dotconfig
View file

@ -11226,7 +11226,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_EVM is not set
CONFIG_DEFAULT_SECURITY_APPARMOR=y
# CONFIG_DEFAULT_SECURITY_DAC is not set
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options

2
srcpkgs/linux5.15/files/i386-dotconfig
View file

@ -9544,7 +9544,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_DEFAULT_SECURITY_SELINUX is not set
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options

2
srcpkgs/linux5.15/files/ppc-dotconfig
View file

@ -7674,7 +7674,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_DEFAULT_SECURITY_SELINUX is not set
CONFIG_DEFAULT_SECURITY_APPARMOR=y
# CONFIG_DEFAULT_SECURITY_DAC is not set
CONFIG_LSM="yama,loadpin,safesetid,integrity,apparmor,selinux,smack,tomoyo"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity,apparmor,selinux,smack,tomoyo"
#
# Kernel hardening options

2
srcpkgs/linux5.15/files/ppc64-dotconfig
View file

@ -9658,7 +9658,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_DEFAULT_SECURITY_SELINUX is not set
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options

2
srcpkgs/linux5.15/files/ppc64le-dotconfig
View file

@ -9380,7 +9380,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_DEFAULT_SECURITY_SELINUX is not set
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options

2
srcpkgs/linux5.15/files/x86_64-dotconfig
View file

@ -9728,7 +9728,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_EVM is not set
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options

2
srcpkgs/linux6.0/files/arm64-dotconfig
View file

@ -11759,7 +11759,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_EVM is not set
CONFIG_DEFAULT_SECURITY_APPARMOR=y
# CONFIG_DEFAULT_SECURITY_DAC is not set
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options

2
srcpkgs/linux6.0/files/i386-dotconfig
View file

@ -9964,7 +9964,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_DEFAULT_SECURITY_SELINUX is not set
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options

2
srcpkgs/linux6.0/files/ppc-dotconfig
View file

@ -8005,7 +8005,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_DEFAULT_SECURITY_SELINUX is not set
CONFIG_DEFAULT_SECURITY_APPARMOR=y
# CONFIG_DEFAULT_SECURITY_DAC is not set
CONFIG_LSM="yama,loadpin,safesetid,integrity,apparmor,selinux,smack,tomoyo"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity,apparmor,selinux,smack,tomoyo"
#
# Kernel hardening options

2
srcpkgs/linux6.0/files/ppc64-dotconfig
View file

@ -10030,7 +10030,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_DEFAULT_SECURITY_SELINUX is not set
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options

2
srcpkgs/linux6.0/files/ppc64le-dotconfig
View file

@ -9750,7 +9750,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_DEFAULT_SECURITY_SELINUX is not set
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options

2
srcpkgs/linux6.0/files/x86_64-dotconfig
View file

@ -10188,7 +10188,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_EVM is not set
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options

2
srcpkgs/linux6.1/files/arm64-dotconfig
View file

@ -11785,7 +11785,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_EVM is not set
CONFIG_DEFAULT_SECURITY_APPARMOR=y
# CONFIG_DEFAULT_SECURITY_DAC is not set
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options

2
srcpkgs/linux6.1/files/i386-dotconfig
View file

@ -9981,7 +9981,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_DEFAULT_SECURITY_SELINUX is not set
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options

2
srcpkgs/linux6.1/files/ppc-dotconfig
View file

@ -8009,7 +8009,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_DEFAULT_SECURITY_SELINUX is not set
CONFIG_DEFAULT_SECURITY_APPARMOR=y
# CONFIG_DEFAULT_SECURITY_DAC is not set
CONFIG_LSM="yama,loadpin,safesetid,integrity,apparmor,selinux,smack,tomoyo"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity,apparmor,selinux,smack,tomoyo"
#
# Kernel hardening options

2
srcpkgs/linux6.1/files/ppc64-dotconfig
View file

@ -10050,7 +10050,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_DEFAULT_SECURITY_SELINUX is not set
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options

2
srcpkgs/linux6.1/files/ppc64le-dotconfig
View file

@ -9771,7 +9771,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_DEFAULT_SECURITY_SELINUX is not set
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options

2
srcpkgs/linux6.1/files/x86_64-dotconfig
View file

@ -10219,7 +10219,7 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_EVM is not set
# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="yama,loadpin,safesetid,integrity"
CONFIG_LSM="landlock,yama,loadpin,safesetid,integrity"
#
# Kernel hardening options