linux-stable/security/lockdown/Makefile at ac23b92b27e32f1ff331350342ce9f2ee9d0ab0f - mirrors/linux-stable - Git - Batts Cloud

mirrors/linux-stable

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2024-10-29 23:53:32 +00:00

Matthew Garrett 000d388ed3 security: Add a static lockdown policy LSM

While existing LSMs can be extended to handle lockdown policy,
distributions generally want to be able to apply a straightforward
static policy. This patch adds a simple LSM that can be configured to
reject either integrity or all lockdown queries, and can be configured
at runtime (through securityfs), boot time (via a kernel parameter) or
build time (via a kconfig option). Based on initial code by David
Howells.

Signed-off-by: Matthew Garrett <mjg59@google.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Cc: David Howells <dhowells@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>

2019-08-19 21:54:15 -07:00

1 line

50 B

Makefile

Raw Blame History

obj-$(CONFIG_SECURITY_LOCKDOWN_LSM) += lockdown.o