John Johansen 6e65f92ff0 Config option to set a default LSM ...

The LSM currently requires setting a kernel parameter at boot to select
a specific LSM.  This adds a config option that allows specifying a default
LSM that is used unless overridden with the security= kernel parameter.
If the the config option is not set the current behavior of first LSM
to register is used.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>

2009-11-09 08:40:07 +11:00

..

integrity/ima

LSM: imbed ima calls in the security hooks

2009-10-25 12:22:48 +08:00

keys

KEYS: Have the garbage collector set its timer for live expired keys

2009-09-23 11:03:47 -07:00

selinux

SELinux: add .gitignore files for dynamic classes

2009-10-24 09:42:27 +08:00

smack

…

tomoyo

tomoyo: improve hash bucket dispersion

2009-10-29 11:17:33 +11:00

capability.c

LSM: Add security_path_chroot().

2009-10-12 10:56:02 +11:00

commoncap.c

security: remove root_plug

2009-10-20 14:26:16 +09:00

device_cgroup.c

cgroups: let ss->can_attach and ss->attach do whole threadgroups at a time

2009-09-24 07:20:58 -07:00

inode.c

…

Kconfig

Config option to set a default LSM

2009-11-09 08:40:07 +11:00

lsm_audit.c

lsm: Use a compressed IPv6 string format in audit events

2009-09-24 03:50:26 -04:00

Makefile

security: remove root_plug

2009-10-20 14:26:16 +09:00

min_addr.c

sysctl: require CAP_SYS_RAWIO to set mmap_min_addr

2009-11-09 08:34:22 +11:00

security.c

Config option to set a default LSM

2009-11-09 08:40:07 +11:00