lkml.org 
[lkml]   [2019]   [Mar]   [27]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: Linux 5.1-rc2
    From
    Date
    On 2019/03/28 4:16, Kees Cook wrote:
    > The part I don't understand is what you've said about TOMOYO being
    > primary and not wanting the others stackable? That kind of goes
    > against the point, but I'm happy to do that if you want it that way.

    Automatically enabling multiple legacy major LSMs might result in a confusion like
    Jakub encountered. For a few releases from 5.1 (about one year or so?), since
    CONFIG_DEFAULT_SECURITY_* will be ignored after CONFIG_LSM is once defined in
    their kernel configs, I guess that it is better not to enable TOMOYO automatically
    until most people complete migrating from CONFIG_DEFAULT_SECURITY_* to CONFIG_LSM
    and get used to use lsm= kernel command line option rather than security= kernel
    command line option.

    \
     
     \ /
      Last update: 2019-03-27 21:31    [W:5.272 / U:0.052 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site