Date: Monday, April 6, 2020 @ 22:39:16 Author: heftig Revision: 379729
Put lockdown LSM into default initialization list Modified: linux-lts/trunk/PKGBUILD linux-lts/trunk/config ----------+ PKGBUILD | 2 +- config | 10 +++++----- 2 files changed, 6 insertions(+), 6 deletions(-) Modified: PKGBUILD =================================================================== --- PKGBUILD 2020-04-06 22:38:15 UTC (rev 379728) +++ PKGBUILD 2020-04-06 22:39:16 UTC (rev 379729) @@ -25,7 +25,7 @@ # https://www.kernel.org/pub/linux/kernel/v5.x/sha256sums.asc sha256sums=('11dd78f701bce619d90d3b2ee597601716c48087e159c890c1decd7b90349def' 'SKIP' - '7a58467b4cf628306a0048993f43508e5da39d8495801602b25b035372651697' + '0c318ec33c82b4ea41117b4d0ab464775e13dc6e8b20aea6c655eb4887eafa0e' 'a13581d3c6dc595206e4fe7fcf6b542e7a1bdbe96101f0f010fc5be49f99baf2') export KBUILD_BUILD_HOST=archlinux Modified: config =================================================================== --- config 2020-04-06 22:38:15 UTC (rev 379728) +++ config 2020-04-06 22:39:16 UTC (rev 379729) @@ -1,13 +1,13 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 5.4.18 Kernel Configuration +# Linux/x86 5.4.30 Kernel Configuration # # -# Compiler: gcc (Arch Linux 9.2.1+20200130-2) 9.2.1 20200130 +# Compiler: gcc (Arch Linux 9.3.0-1) 9.3.0 # CONFIG_CC_IS_GCC=y -CONFIG_GCC_VERSION=90201 +CONFIG_GCC_VERSION=90300 CONFIG_CLANG_VERSION=0 CONFIG_CC_CAN_LINK=y CONFIG_CC_HAS_ASM_GOTO=y @@ -22,7 +22,6 @@ # CONFIG_INIT_ENV_ARG_LIMIT=32 # CONFIG_COMPILE_TEST is not set -# CONFIG_HEADER_TEST is not set CONFIG_LOCALVERSION="" CONFIG_LOCALVERSION_AUTO=y CONFIG_BUILD_SALT="" @@ -1048,6 +1047,7 @@ CONFIG_COMPAT_NETLINK_MESSAGES=y CONFIG_NET_INGRESS=y CONFIG_NET_EGRESS=y +CONFIG_NET_REDIRECT=y CONFIG_SKB_EXTENSIONS=y # @@ -9922,7 +9922,7 @@ # CONFIG_DEFAULT_SECURITY_TOMOYO is not set # CONFIG_DEFAULT_SECURITY_APPARMOR is not set CONFIG_DEFAULT_SECURITY_DAC=y -CONFIG_LSM="yama" +CONFIG_LSM="lockdown,yama" # # Kernel hardening options