Enable apparmor
This commit is contained in:
@@ -1,7 +1,7 @@
|
|||||||
name: linux-stable
|
name: linux-stable
|
||||||
description: The stable version of the linux kernel
|
description: The stable version of the linux kernel
|
||||||
version: 6.19.11
|
version: 6.19.11
|
||||||
revision: 2
|
revision: 3
|
||||||
url: https://www.kernel.org/
|
url: https://www.kernel.org/
|
||||||
license: GPL2-only
|
license: GPL2-only
|
||||||
maintainers:
|
maintainers:
|
||||||
|
|||||||
+11
-4
@@ -7197,7 +7197,7 @@ CONFIG_HAS_SECURITY_AUDIT=y
|
|||||||
CONFIG_SECURITYFS=y
|
CONFIG_SECURITYFS=y
|
||||||
CONFIG_SECURITY_NETWORK=y
|
CONFIG_SECURITY_NETWORK=y
|
||||||
# CONFIG_SECURITY_NETWORK_XFRM is not set
|
# CONFIG_SECURITY_NETWORK_XFRM is not set
|
||||||
# CONFIG_SECURITY_PATH is not set
|
CONFIG_SECURITY_PATH=y
|
||||||
# CONFIG_INTEL_TXT is not set
|
# CONFIG_INTEL_TXT is not set
|
||||||
CONFIG_LSM_MMAP_MIN_ADDR=65536
|
CONFIG_LSM_MMAP_MIN_ADDR=65536
|
||||||
# CONFIG_STATIC_USERMODEHELPER is not set
|
# CONFIG_STATIC_USERMODEHELPER is not set
|
||||||
@@ -7210,7 +7210,13 @@ CONFIG_SECURITY_SELINUX_SID2STR_CACHE_SIZE=256
|
|||||||
# CONFIG_SECURITY_SELINUX_DEBUG is not set
|
# CONFIG_SECURITY_SELINUX_DEBUG is not set
|
||||||
# CONFIG_SECURITY_SMACK is not set
|
# CONFIG_SECURITY_SMACK is not set
|
||||||
# CONFIG_SECURITY_TOMOYO is not set
|
# CONFIG_SECURITY_TOMOYO is not set
|
||||||
# CONFIG_SECURITY_APPARMOR is not set
|
CONFIG_SECURITY_APPARMOR=y
|
||||||
|
# CONFIG_SECURITY_APPARMOR_DEBUG is not set
|
||||||
|
CONFIG_SECURITY_APPARMOR_INTROSPECT_POLICY=y
|
||||||
|
CONFIG_SECURITY_APPARMOR_HASH=y
|
||||||
|
CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
|
||||||
|
CONFIG_SECURITY_APPARMOR_EXPORT_BINARY=y
|
||||||
|
CONFIG_SECURITY_APPARMOR_PARANOID_LOAD=y
|
||||||
# CONFIG_SECURITY_LOADPIN is not set
|
# CONFIG_SECURITY_LOADPIN is not set
|
||||||
# CONFIG_SECURITY_YAMA is not set
|
# CONFIG_SECURITY_YAMA is not set
|
||||||
# CONFIG_SECURITY_SAFESETID is not set
|
# CONFIG_SECURITY_SAFESETID is not set
|
||||||
@@ -7223,7 +7229,8 @@ CONFIG_INTEGRITY_AUDIT=y
|
|||||||
# CONFIG_IMA is not set
|
# CONFIG_IMA is not set
|
||||||
# CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set
|
# CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set
|
||||||
# CONFIG_EVM is not set
|
# CONFIG_EVM is not set
|
||||||
CONFIG_DEFAULT_SECURITY_SELINUX=y
|
# CONFIG_DEFAULT_SECURITY_SELINUX is not set
|
||||||
|
CONFIG_DEFAULT_SECURITY_APPARMOR=y
|
||||||
# CONFIG_DEFAULT_SECURITY_DAC is not set
|
# CONFIG_DEFAULT_SECURITY_DAC is not set
|
||||||
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,apparmor,bpf"
|
CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,apparmor,bpf"
|
||||||
|
|
||||||
@@ -7590,7 +7597,7 @@ CONFIG_LZ4_COMPRESS=m
|
|||||||
CONFIG_LZ4HC_COMPRESS=m
|
CONFIG_LZ4HC_COMPRESS=m
|
||||||
CONFIG_LZ4_DECOMPRESS=y
|
CONFIG_LZ4_DECOMPRESS=y
|
||||||
CONFIG_ZSTD_COMMON=y
|
CONFIG_ZSTD_COMMON=y
|
||||||
CONFIG_ZSTD_COMPRESS=m
|
CONFIG_ZSTD_COMPRESS=y
|
||||||
CONFIG_ZSTD_DECOMPRESS=y
|
CONFIG_ZSTD_DECOMPRESS=y
|
||||||
CONFIG_XZ_DEC=y
|
CONFIG_XZ_DEC=y
|
||||||
CONFIG_XZ_DEC_X86=y
|
CONFIG_XZ_DEC_X86=y
|
||||||
|
|||||||
Reference in New Issue
Block a user