Commit f0c6cbb
Herton R. Krzesinski
Merge: config: Enable Security Path
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/1910
The customer requested enabling CONFIG_SECURITY_PATH in
order to use several LSM hooks provided by this option.
Business justification from customer:
We want to implement monitor and enforcement (synchronously,
not asynchronously using kprobes) for some of the LSM hooks
to implement MAC on systems we cannot enforce using SELinux
(also due to contract restrictions). The list of LSM hooks we
want to use (for now are): path_chmod, path_unlink,
path_chown, path_link and path_symlink.
Upstream-Status: RHEL-Only
Bugzilla: http://bugzilla.redhat.com/2161307
Signed-off-by: Ricardo Robaina <rrobaina@redhat.com>
Approved-by: Yauheni Kaliuta <ykaliuta@redhat.com>
Approved-by: Ondrej Mosnáček <omosnacek@gmail.com>
Signed-off-by: Herton R. Krzesinski <herton@redhat.com>1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
0 commit comments