Messages in this thread | | | Date | Sat, 2 May 2020 04:05:53 +1000 (AEST) | From | James Morris <> | Subject | Re: [PATCH v3 3/5] fs: Enable to enforce noexec mounts or file exec through RESOLVE_MAYEXEC |
| |
On Fri, 1 May 2020, Mickaël Salaün wrote:
> > However, for fully controlled distros such as CLIP OS, it make sense to > enforce such restrictions at kernel build time. I can add an alternative > kernel configuration to enforce a particular policy at boot and disable > this sysctl.
Sounds good.
-- James Morris <jmorris@namei.org>
| |