On Thu, Mar 27, 2014 at 5:46 AM, Thomas Bächler >The fact that these LSMs must be compiled into the kernel and cannot be built >as modules tells you something important: These options change the behaviour >of the kernel at its core.
I was under the impression that this was s security feature to make it a bit more difficult to switch off your configured LSM. -- Pete
