use DAC as security
This commit is contained in:
parent
803bdb70a3
commit
a05051c453
|
@ -5686,7 +5686,6 @@ CONFIG_BIG_KEYS=y
|
|||
# CONFIG_KEY_DH_OPERATIONS is not set
|
||||
# CONFIG_SECURITY_DMESG_RESTRICT is not set
|
||||
CONFIG_SECURITY=y
|
||||
CONFIG_SECURITY_WRITABLE_HOOKS=y
|
||||
# CONFIG_SECURITY_STACKING is not set
|
||||
# CONFIG_SECURITY_LSM_DEBUG is not set
|
||||
CONFIG_SECURITYFS=y
|
||||
|
@ -5694,20 +5693,13 @@ CONFIG_SECURITY_NETWORK=y
|
|||
# CONFIG_PAGE_TABLE_ISOLATION is not set
|
||||
# CONFIG_SECURITY_NETWORK_XFRM is not set
|
||||
# CONFIG_SECURITY_PATH is not set
|
||||
CONFIG_LSM_MMAP_MIN_ADDR=65536
|
||||
CONFIG_HAVE_HARDENED_USERCOPY_ALLOCATOR=y
|
||||
CONFIG_HARDENED_USERCOPY=y
|
||||
CONFIG_HARDENED_USERCOPY_FALLBACK=y
|
||||
# CONFIG_HARDENED_USERCOPY_PAGESPAN is not set
|
||||
# CONFIG_FORTIFY_SOURCE is not set
|
||||
# CONFIG_STATIC_USERMODEHELPER is not set
|
||||
CONFIG_SECURITY_SELINUX=y
|
||||
CONFIG_SECURITY_SELINUX_BOOTPARAM=y
|
||||
CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
|
||||
CONFIG_SECURITY_SELINUX_DISABLE=y
|
||||
CONFIG_SECURITY_SELINUX_DEVELOP=y
|
||||
CONFIG_SECURITY_SELINUX_AVC_STATS=y
|
||||
CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
|
||||
# CONFIG_SECURITY_SELINUX is not set
|
||||
# CONFIG_SECURITY_SMACK is not set
|
||||
# CONFIG_SECURITY_TOMOYO is not set
|
||||
# CONFIG_SECURITY_APPARMOR is not set
|
||||
|
@ -5718,9 +5710,8 @@ CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
|
|||
#
|
||||
# Security Module Selection
|
||||
#
|
||||
CONFIG_DEFAULT_SECURITY_SELINUX=y
|
||||
# CONFIG_DEFAULT_SECURITY_DAC is not set
|
||||
CONFIG_DEFAULT_SECURITY="selinux"
|
||||
CONFIG_DEFAULT_SECURITY_DAC=y
|
||||
CONFIG_DEFAULT_SECURITY=""
|
||||
CONFIG_CRYPTO=y
|
||||
|
||||
#
|
||||
|
|
|
@ -28,8 +28,8 @@ Source4: cmdline-iot-lts2018-sos
|
|||
|
||||
# quilt.url: https://github.com/intel/linux-intel-quilt
|
||||
# quilt.branch: 4.19/base
|
||||
# quilt: lts-v4.19-base-181127T002205Z
|
||||
# config: lts-v4.19-base-181122T003717Z
|
||||
# quilt.tag: lts-v4.19-base-181127T002205Z
|
||||
# config.tag: lts-v4.19-base-181122T003717Z
|
||||
|
||||
%define ktarget0 iot-lts2018
|
||||
%define kversion0 %{version}-%{release}.%{ktarget0}
|
||||
|
|
Loading…
Reference in New Issue