Put lockdown LSM into default initialization list

2020-04-06 22:36:28 +00:00 · 2020-04-06 22:36:28 +00:00 · f4bf2c8d61
commit f4bf2c8d61
parent d917c0fbc9
2 changed files with 2 additions and 2 deletions
--- a/2
+++ b/2
@ -25,7 +25,7 @@ validpgpkeys=(
  '8218F88849AAC522E94CF470A5E9288C4FA415FA'  # Jan Alexander Steffens (heftig)
 )
 sha256sums=('SKIP'
-            '5c809f7ca4f21ebd95368533b20c0ed78fe2e006762dff742e5fd0751521ad11')
+            'e78bfa9f5a1065d93396a37d59043bd79805f4681df27ef44dcddea8de092818')

 export KBUILD_BUILD_HOST=archlinux
 export KBUILD_BUILD_USER=$pkgbase
--- a/2
+++ b/2
@ -10021,7 +10021,7 @@ CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
 # CONFIG_DEFAULT_SECURITY_TOMOYO is not set
 # CONFIG_DEFAULT_SECURITY_APPARMOR is not set
 CONFIG_DEFAULT_SECURITY_DAC=y
-CONFIG_LSM="yama"
+CONFIG_LSM="lockdown,yama"

 #
 # Kernel hardening options