QubesOS/qubes-linux-kernel
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

config: disable SELinux

Browse Source 
CONFIG_LSM is a new option which can be used to enable SELinux. Base
Fedora config does that. When disabled at runtime only, SELinux-aware
kernel will refuse setting securit.selinux xattr, breaking multiple
tools, including initramfs generation (cp --preserve=xattr fails).
This commit is contained in:
Marek Marczykowski-Górecki 2019-05-15 21:58:09 +02:00
parent c68ee341b2
commit 98cd4d1c78
No known key found for this signature in database
GPG Key ID: 063938BA42CFA724
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
config-qubes
View File

@ -86,6 +86,7 @@ CONFIG_SECURITY_YAMA=y
# CONFIG_DEFAULT_SECURITY_SELINUX is not set
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_LSM="yama,loadpin,safesetid,integrity"
################################################################################