diff options
author | Kees Cook <keescook@chromium.org> | 2018-10-09 23:27:46 +0200 |
---|---|---|
committer | Kees Cook <keescook@chromium.org> | 2019-01-08 22:18:42 +0100 |
commit | 13e735c0e953246bd531d342bb86acb5b1bf664a (patch) | |
tree | 83ec689b7a7a22f71f7f35c0cdf2be1a8a67fcbe /security/Kconfig | |
parent | LSM: Build ordered list of LSMs to initialize (diff) | |
download | linux-13e735c0e953246bd531d342bb86acb5b1bf664a.tar.xz linux-13e735c0e953246bd531d342bb86acb5b1bf664a.zip |
LSM: Introduce CONFIG_LSM
This provides a way to declare LSM initialization order via the new
CONFIG_LSM. Currently only non-major LSMs are recognized. This will
be expanded in future patches.
Signed-off-by: Kees Cook <keescook@chromium.org>
Diffstat (limited to 'security/Kconfig')
-rw-r--r-- | security/Kconfig | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/security/Kconfig b/security/Kconfig index e4fe2f3c2c65..7f21190cb677 100644 --- a/security/Kconfig +++ b/security/Kconfig @@ -276,5 +276,14 @@ config DEFAULT_SECURITY default "apparmor" if DEFAULT_SECURITY_APPARMOR default "" if DEFAULT_SECURITY_DAC +config LSM + string "Ordered list of enabled LSMs" + default "integrity" + help + A comma-separated list of LSMs, in initialization order. + Any LSMs left off this list will be ignored. + + If unsure, leave this as the default. + endmenu |