diff options
| author | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2019-05-07 15:25:46 -0700 |
|---|---|---|
| committer | jc_gargma <jc_gargma@iserlohn-fortress.net> | 2019-05-07 15:25:46 -0700 |
| commit | 5eed595de9c561557cc2d862d379bf949ca76857 (patch) | |
| tree | c29e2d96b607749820419c561e3d9b8631bb3b0c | |
| parent | Reorganize PKGBUILD (diff) | |
| download | linux-5eed595de9c561557cc2d862d379bf949ca76857.tar.xz | |
As per upstream, "Disable integrity, enable safesetid, only load yama by default"
| -rw-r--r-- | PKGBUILD | 2 | ||||
| -rw-r--r-- | config.x86_64 | 10 |
2 files changed, 4 insertions, 8 deletions
@@ -48,7 +48,7 @@ sha256sums=('d06a7be6e73f97d1350677ad3bae0ce7daecb79c2c2902aaabe806f7fa94f041' 'd35338c92d0dbf27ffedaf100bd852dd13fd9b5d49b12a10b91194a2ae654447' 'e7ebf050c22bcec0028c0b3c79fd6d3913b0370ecc6a23dfe78ce475630cf503' '0f81d6e4158b7beeb0eb514f1b9401f7e23699cb0f7b0d513e25dae1815daaeb' - 'b3954207163a7ba5162b655fb05f969d07338c62f880a0eb67e9f9f24e1a9d98' + '8ecfdf3c165289a328cca66230a36c58b88a200e58f799c7f2c89da5b35a52ba' 'ae2e95db94ef7176207c690224169594d49445e04249d2499e9d2fbc117a0b21' '75f99f5239e03238f88d1a834c50043ec32b1dc568f2cc291b07d04718483919' 'ad6344badc91ad0630caacde83f7f9b97276f80d26a20619a87952be65492c65') diff --git a/config.x86_64 b/config.x86_64 index 08ad562..bdf223e 100644 --- a/config.x86_64 +++ b/config.x86_64 @@ -9350,18 +9350,14 @@ CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y # CONFIG_SECURITY_APPARMOR_DEBUG is not set # CONFIG_SECURITY_LOADPIN is not set CONFIG_SECURITY_YAMA=y -# CONFIG_SECURITY_SAFESETID is not set -CONFIG_INTEGRITY=y -# CONFIG_INTEGRITY_SIGNATURE is not set -CONFIG_INTEGRITY_AUDIT=y -# CONFIG_IMA is not set -# CONFIG_EVM is not set +CONFIG_SECURITY_SAFESETID=y +# CONFIG_INTEGRITY is not set # CONFIG_DEFAULT_SECURITY_SELINUX is not set # CONFIG_DEFAULT_SECURITY_SMACK is not set # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_APPARMOR is not set CONFIG_DEFAULT_SECURITY_DAC=y -CONFIG_LSM="yama,loadpin,safesetid,integrity" +CONFIG_LSM="yama" CONFIG_XOR_BLOCKS=m CONFIG_ASYNC_CORE=m CONFIG_ASYNC_MEMCPY=m |