Commit 2100a11
committed
config: Enable Security Path
The customer requested enabling CONFIG_SECURITY_PATH in
order to use several LSM hooks provided by this option.
Business justification from customer:
We want to implement monitor and enforcement (synchronously,
not asynchronously using kprobes) for some of the LSM hooks
to implement MAC on systems we cannot enforce using SELinux
(also due to contract restrictions). The list of LSM hooks we
want to use (for now are): path_chmod, path_unlink,
path_chown, path_link and path_symlink.
Upstream-Status: RHEL-Only
Bugzilla: http://bugzilla.redhat.com/2161307
Signed-off-by: Ricardo Robaina <rrobaina@redhat.com>1 parent 61ade87 commit 2100a11
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
0 commit comments