Enable apparmor

This commit is contained in:
2026-04-07 17:02:34 +03:00
parent 1beec0576a
commit 3c5e83b32c
2 changed files with 12 additions and 5 deletions
+1 -1
View File
@@ -1,7 +1,7 @@
name: linux-stable name: linux-stable
description: The stable version of the linux kernel description: The stable version of the linux kernel
version: 6.19.11 version: 6.19.11
revision: 2 revision: 3
url: https://www.kernel.org/ url: https://www.kernel.org/
license: GPL2-only license: GPL2-only
maintainers: maintainers:
+11 -4
View File
@@ -7197,7 +7197,7 @@ CONFIG_HAS_SECURITY_AUDIT=y
CONFIG_SECURITYFS=y CONFIG_SECURITYFS=y
CONFIG_SECURITY_NETWORK=y CONFIG_SECURITY_NETWORK=y
# CONFIG_SECURITY_NETWORK_XFRM is not set # CONFIG_SECURITY_NETWORK_XFRM is not set
# CONFIG_SECURITY_PATH is not set CONFIG_SECURITY_PATH=y
# CONFIG_INTEL_TXT is not set # CONFIG_INTEL_TXT is not set
CONFIG_LSM_MMAP_MIN_ADDR=65536 CONFIG_LSM_MMAP_MIN_ADDR=65536
# CONFIG_STATIC_USERMODEHELPER is not set # CONFIG_STATIC_USERMODEHELPER is not set
@@ -7210,7 +7210,13 @@ CONFIG_SECURITY_SELINUX_SID2STR_CACHE_SIZE=256
# CONFIG_SECURITY_SELINUX_DEBUG is not set # CONFIG_SECURITY_SELINUX_DEBUG is not set
# CONFIG_SECURITY_SMACK is not set # CONFIG_SECURITY_SMACK is not set
# CONFIG_SECURITY_TOMOYO is not set # CONFIG_SECURITY_TOMOYO is not set
# CONFIG_SECURITY_APPARMOR is not set CONFIG_SECURITY_APPARMOR=y
# CONFIG_SECURITY_APPARMOR_DEBUG is not set
CONFIG_SECURITY_APPARMOR_INTROSPECT_POLICY=y
CONFIG_SECURITY_APPARMOR_HASH=y
CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
CONFIG_SECURITY_APPARMOR_EXPORT_BINARY=y
CONFIG_SECURITY_APPARMOR_PARANOID_LOAD=y
# CONFIG_SECURITY_LOADPIN is not set # CONFIG_SECURITY_LOADPIN is not set
# CONFIG_SECURITY_YAMA is not set # CONFIG_SECURITY_YAMA is not set
# CONFIG_SECURITY_SAFESETID is not set # CONFIG_SECURITY_SAFESETID is not set
@@ -7223,7 +7229,8 @@ CONFIG_INTEGRITY_AUDIT=y
# CONFIG_IMA is not set # CONFIG_IMA is not set
# CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set # CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set
# CONFIG_EVM is not set # CONFIG_EVM is not set
CONFIG_DEFAULT_SECURITY_SELINUX=y # CONFIG_DEFAULT_SECURITY_SELINUX is not set
CONFIG_DEFAULT_SECURITY_APPARMOR=y
# CONFIG_DEFAULT_SECURITY_DAC is not set # CONFIG_DEFAULT_SECURITY_DAC is not set
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,apparmor,bpf" CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,apparmor,bpf"
@@ -7590,7 +7597,7 @@ CONFIG_LZ4_COMPRESS=m
CONFIG_LZ4HC_COMPRESS=m CONFIG_LZ4HC_COMPRESS=m
CONFIG_LZ4_DECOMPRESS=y CONFIG_LZ4_DECOMPRESS=y
CONFIG_ZSTD_COMMON=y CONFIG_ZSTD_COMMON=y
CONFIG_ZSTD_COMPRESS=m CONFIG_ZSTD_COMPRESS=y
CONFIG_ZSTD_DECOMPRESS=y CONFIG_ZSTD_DECOMPRESS=y
CONFIG_XZ_DEC=y CONFIG_XZ_DEC=y
CONFIG_XZ_DEC_X86=y CONFIG_XZ_DEC_X86=y