summaryrefslogtreecommitdiffstats
path: root/security/Kconfig
diff options
context:
space:
mode:
authorKees Cook <keescook@chromium.org>2018-10-09 23:27:46 +0200
committerKees Cook <keescook@chromium.org>2019-01-08 22:18:42 +0100
commit13e735c0e953246bd531d342bb86acb5b1bf664a (patch)
tree83ec689b7a7a22f71f7f35c0cdf2be1a8a67fcbe /security/Kconfig
parentLSM: Build ordered list of LSMs to initialize (diff)
downloadlinux-13e735c0e953246bd531d342bb86acb5b1bf664a.tar.xz
linux-13e735c0e953246bd531d342bb86acb5b1bf664a.zip
LSM: Introduce CONFIG_LSM
This provides a way to declare LSM initialization order via the new CONFIG_LSM. Currently only non-major LSMs are recognized. This will be expanded in future patches. Signed-off-by: Kees Cook <keescook@chromium.org>
Diffstat (limited to 'security/Kconfig')
-rw-r--r--security/Kconfig9
1 files changed, 9 insertions, 0 deletions
diff --git a/security/Kconfig b/security/Kconfig
index e4fe2f3c2c65..7f21190cb677 100644
--- a/security/Kconfig
+++ b/security/Kconfig
@@ -276,5 +276,14 @@ config DEFAULT_SECURITY
default "apparmor" if DEFAULT_SECURITY_APPARMOR
default "" if DEFAULT_SECURITY_DAC
+config LSM
+ string "Ordered list of enabled LSMs"
+ default "integrity"
+ help
+ A comma-separated list of LSMs, in initialization order.
+ Any LSMs left off this list will be ignored.
+
+ If unsure, leave this as the default.
+
endmenu