From 1ef40f40e593a5dc223e9ce171fa8f2cd5aba198 Mon Sep 17 00:00:00 2001 From: Ben Hutchings Date: Sat, 30 Jul 2022 16:22:10 +0200 Subject: security: Add landlock and bpf to enabled LSM list Update CONFIG_LSM to match the upstream default when CONFIG_DEFAULT_SECURITY_APPARMOR is enabled. --- debian/changelog | 1 + debian/config/config | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/debian/changelog b/debian/changelog index 75a8dbc27..27b0ab10e 100644 --- a/debian/changelog +++ b/debian/changelog @@ -5,6 +5,7 @@ linux (5.18.14-2) UNRELEASED; urgency=medium * d/lib/python/debian_linux/debian.py: Add Architecture field to TestsControl * d/tests: Restrict kbuild tests to architectures with default or quick flavour + * security: Add landlock and bpf to enabled LSM list -- Ben Hutchings Fri, 29 Jul 2022 00:43:54 +0200 diff --git a/debian/config/config b/debian/config/config index 65a89a134..d3f9b66bf 100644 --- a/debian/config/config +++ b/debian/config/config @@ -7709,7 +7709,7 @@ CONFIG_FORTIFY_SOURCE=y ## choice: First legacy 'major LSM' to be initialized CONFIG_DEFAULT_SECURITY_APPARMOR=y ## end choice -CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity,apparmor,selinux,smack,tomoyo" +CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,apparmor,selinux,smack,tomoyo,bpf" ## ## file: security/Kconfig.hardening -- cgit v1.2.3