Skip to content

Commit f0c6cbb

Browse files
author
Herton R. Krzesinski
committed
Merge: config: Enable Security Path
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/1910 The customer requested enabling CONFIG_SECURITY_PATH in order to use several LSM hooks provided by this option. Business justification from customer: We want to implement monitor and enforcement (synchronously, not asynchronously using kprobes) for some of the LSM hooks to implement MAC on systems we cannot enforce using SELinux (also due to contract restrictions). The list of LSM hooks we want to use (for now are): path_chmod, path_unlink, path_chown, path_link and path_symlink. Upstream-Status: RHEL-Only Bugzilla: http://bugzilla.redhat.com/2161307 Signed-off-by: Ricardo Robaina <rrobaina@redhat.com> Approved-by: Yauheni Kaliuta <ykaliuta@redhat.com> Approved-by: Ondrej Mosnáček <omosnacek@gmail.com> Signed-off-by: Herton R. Krzesinski <herton@redhat.com>
2 parents e4a204d + 2100a11 commit f0c6cbb

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
# CONFIG_SECURITY_PATH is not set
1+
CONFIG_SECURITY_PATH=y

0 commit comments

Comments
 (0)