Skip to content

Commit 2100a11

Browse files
committed
config: Enable Security Path
The customer requested enabling CONFIG_SECURITY_PATH in order to use several LSM hooks provided by this option. Business justification from customer: We want to implement monitor and enforcement (synchronously, not asynchronously using kprobes) for some of the LSM hooks to implement MAC on systems we cannot enforce using SELinux (also due to contract restrictions). The list of LSM hooks we want to use (for now are): path_chmod, path_unlink, path_chown, path_link and path_symlink. Upstream-Status: RHEL-Only Bugzilla: http://bugzilla.redhat.com/2161307 Signed-off-by: Ricardo Robaina <rrobaina@redhat.com>
1 parent 61ade87 commit 2100a11

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
# CONFIG_SECURITY_PATH is not set
1+
CONFIG_SECURITY_PATH=y

0 commit comments

Comments
 (0)