Messages in this thread | | | Subject | Re: Linux 5.1-rc2 | From | Tetsuo Handa <> | Date | Thu, 28 Mar 2019 05:30:04 +0900 |
| |
On 2019/03/28 4:16, Kees Cook wrote: > The part I don't understand is what you've said about TOMOYO being > primary and not wanting the others stackable? That kind of goes > against the point, but I'm happy to do that if you want it that way.
Automatically enabling multiple legacy major LSMs might result in a confusion like Jakub encountered. For a few releases from 5.1 (about one year or so?), since CONFIG_DEFAULT_SECURITY_* will be ignored after CONFIG_LSM is once defined in their kernel configs, I guess that it is better not to enable TOMOYO automatically until most people complete migrating from CONFIG_DEFAULT_SECURITY_* to CONFIG_LSM and get used to use lsm= kernel command line option rather than security= kernel command line option.
| |