From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peter =?utf-8?q?M=C3=BCller?= To: development@lists.ipfire.org Subject: [PATCH 2/2] kernel: enable CONFIG_SECURITY_LOADPIN_ENFORCE Date: Tue, 09 Jun 2020 18:38:46 +0000 Message-ID: In-Reply-To: <86af19ef-9c55-b83a-7895-25ce81ec97e6@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============2855859934809417210==" List-Id: --===============2855859934809417210== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Partially fixes: #12432 Cc: Arne Fitzenreiter Signed-off-by: Peter M=C3=BCller --- config/kernel/kernel.config.aarch64-ipfire | 1 + config/kernel/kernel.config.armv5tel-ipfire-multi | 1 + config/kernel/kernel.config.i586-ipfire | 1 + config/kernel/kernel.config.x86_64-ipfire | 1 + 4 files changed, 4 insertions(+) diff --git a/config/kernel/kernel.config.aarch64-ipfire b/config/kernel/kerne= l.config.aarch64-ipfire index 62b518977..d20b92fc4 100644 --- a/config/kernel/kernel.config.aarch64-ipfire +++ b/config/kernel/kernel.config.aarch64-ipfire @@ -6549,6 +6549,7 @@ CONFIG_HARDENED_USERCOPY_PAGESPAN=3Dy # CONFIG_SECURITY_TOMOYO is not set # CONFIG_SECURITY_APPARMOR is not set CONFIG_SECURITY_LOADPIN=3Dy +CONFIG_SECURITY_LOADPIN_ENFORCE=3Dy # CONFIG_SECURITY_YAMA is not set CONFIG_INTEGRITY=3Dy # CONFIG_INTEGRITY_SIGNATURE is not set diff --git a/config/kernel/kernel.config.armv5tel-ipfire-multi b/config/kerne= l/kernel.config.armv5tel-ipfire-multi index 4e0ca0460..b71c43243 100644 --- a/config/kernel/kernel.config.armv5tel-ipfire-multi +++ b/config/kernel/kernel.config.armv5tel-ipfire-multi @@ -7031,6 +7031,7 @@ CONFIG_HARDENED_USERCOPY_PAGESPAN=3Dy # CONFIG_SECURITY_TOMOYO is not set # CONFIG_SECURITY_APPARMOR is not set CONFIG_SECURITY_LOADPIN=3Dy +CONFIG_SECURITY_LOADPIN_ENFORCE=3Dy # CONFIG_SECURITY_YAMA is not set CONFIG_INTEGRITY=3Dy # CONFIG_INTEGRITY_SIGNATURE is not set diff --git a/config/kernel/kernel.config.i586-ipfire b/config/kernel/kernel.c= onfig.i586-ipfire index 096ef6141..33649d95c 100644 --- a/config/kernel/kernel.config.i586-ipfire +++ b/config/kernel/kernel.config.i586-ipfire @@ -6695,6 +6695,7 @@ CONFIG_FORTIFY_SOURCE=3Dy # CONFIG_SECURITY_TOMOYO is not set # CONFIG_SECURITY_APPARMOR is not set CONFIG_SECURITY_LOADPIN=3Dy +CONFIG_SECURITY_LOADPIN_ENFORCE=3Dy # CONFIG_SECURITY_YAMA is not set CONFIG_INTEGRITY=3Dy # CONFIG_INTEGRITY_SIGNATURE is not set diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel= .config.x86_64-ipfire index 841a45bd0..85ac82f92 100644 --- a/config/kernel/kernel.config.x86_64-ipfire +++ b/config/kernel/kernel.config.x86_64-ipfire @@ -6561,6 +6561,7 @@ CONFIG_FORTIFY_SOURCE=3Dy # CONFIG_SECURITY_TOMOYO is not set # CONFIG_SECURITY_APPARMOR is not set CONFIG_SECURITY_LOADPIN=3Dy +CONFIG_SECURITY_LOADPIN_ENFORCE=3Dy # CONFIG_SECURITY_YAMA is not set CONFIG_INTEGRITY=3Dy # CONFIG_INTEGRITY_SIGNATURE is not set --=20 2.26.2 --===============2855859934809417210==--