From e6c44cff635c1f042f74c04b0534487466432973 Mon Sep 17 00:00:00 2001 From: Simon Gaiser Date: Mon, 5 Feb 2018 23:48:42 +0100 Subject: [PATCH] Remove CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=0 Setting it is not useful since we changed the default LSM anyway and it makes enabling SELinux harder (requires changing the cmdline). (cherry picked from commit f9db313392df69ec6395c0cbfe7858c018ff499b) --- config-qubes | 2 -- 1 file changed, 2 deletions(-) diff --git a/config-qubes b/config-qubes index 29bce3c..37ed607 100644 --- a/config-qubes +++ b/config-qubes @@ -87,8 +87,6 @@ CONFIG_SECURITY_YAMA=y # CONFIG_DEFAULT_SECURITY_SELINUX is not set CONFIG_DEFAULT_SECURITY_DAC=y -CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=0 - ################################################################################ ## Enable paravirt spinlocks. This should be more performant.