diff options
| author | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2019-05-07 15:27:11 -0700 |
|---|---|---|
| committer | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2019-05-07 15:27:11 -0700 |
| commit | 312fb2a2ffb701092dbd22fe3c0106c998d9974d (patch) | |
| tree | c9a983bcf72e09f641448e96dfbab750cbd2127f /config.x86_64 | |
| parent | Reorganize PKGBUILD (diff) | |
| download | linux-libre-312fb2a2ffb701092dbd22fe3c0106c998d9974d.tar.xz | |
As per upstream, "Disable integrity, enable safesetid, only load yama by default"
Diffstat (limited to 'config.x86_64')
| -rw-r--r-- | config.x86_64 | 10 |
1 files changed, 3 insertions, 7 deletions
diff --git a/config.x86_64 b/config.x86_64 index 704ea7a..cf091e4 100644 --- a/config.x86_64 +++ b/config.x86_64 @@ -9350,18 +9350,14 @@ CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y # CONFIG_SECURITY_APPARMOR_DEBUG is not set # CONFIG_SECURITY_LOADPIN is not set CONFIG_SECURITY_YAMA=y -# CONFIG_SECURITY_SAFESETID is not set -CONFIG_INTEGRITY=y -# CONFIG_INTEGRITY_SIGNATURE is not set -CONFIG_INTEGRITY_AUDIT=y -# CONFIG_IMA is not set -# CONFIG_EVM is not set +CONFIG_SECURITY_SAFESETID=y +# CONFIG_INTEGRITY is not set # CONFIG_DEFAULT_SECURITY_SELINUX is not set # CONFIG_DEFAULT_SECURITY_SMACK is not set # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_APPARMOR is not set CONFIG_DEFAULT_SECURITY_DAC=y -CONFIG_LSM="yama,loadpin,safesetid,integrity" +CONFIG_LSM="yama" CONFIG_XOR_BLOCKS=m CONFIG_ASYNC_CORE=m CONFIG_ASYNC_MEMCPY=m |