diff options
| author | Kees Cook <keescook@chromium.org> | 2018-10-09 14:27:46 -0700 |
|---|---|---|
| committer | Kees Cook <keescook@chromium.org> | 2019-01-08 13:18:42 -0800 |
| commit | 13e735c0e953246bd531d342bb86acb5b1bf664a (patch) | |
| tree | 83ec689b7a7a22f71f7f35c0cdf2be1a8a67fcbe /security/Kconfig | |
| parent | 2d4d51198c730adbbc5e071b18c84e5d0d2d65df (diff) | |
| download | linux-stable-13e735c0e953246bd531d342bb86acb5b1bf664a.tar.gz linux-stable-13e735c0e953246bd531d342bb86acb5b1bf664a.tar.bz2 linux-stable-13e735c0e953246bd531d342bb86acb5b1bf664a.zip | |
LSM: Introduce CONFIG_LSM
This provides a way to declare LSM initialization order via the new
CONFIG_LSM. Currently only non-major LSMs are recognized. This will
be expanded in future patches.
Signed-off-by: Kees Cook <keescook@chromium.org>
Diffstat (limited to 'security/Kconfig')
| -rw-r--r-- | security/Kconfig | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/security/Kconfig b/security/Kconfig index e4fe2f3c2c65..7f21190cb677 100644 --- a/security/Kconfig +++ b/security/Kconfig @@ -276,5 +276,14 @@ config DEFAULT_SECURITY default "apparmor" if DEFAULT_SECURITY_APPARMOR default "" if DEFAULT_SECURITY_DAC +config LSM + string "Ordered list of enabled LSMs" + default "integrity" + help + A comma-separated list of LSMs, in initialization order. + Any LSMs left off this list will be ignored. + + If unsure, leave this as the default. + endmenu |