[OS-BUILD PATCH 2/2] configs: enable BPF LSM on Fedora and ARK

2021-03-03 Thread via Email Bridge
From: Ondrej Mosnacek configs: enable BPF LSM on Fedora and ARK We are going to want to enable BPF LSM in RHEL, so start building it on ARK and update the default LSM list so that it is enabled on boot by default (to enable testing). It should have almost no performance impact unless userspace a

[OS-BUILD PATCH 1/2] configs: clean up LSM configs

2021-03-03 Thread via Email Bridge
From: Ondrej Mosnacek configs: clean up LSM configs 1. Move CONFIG_SECURITY_LOCKDOWN_LSM from pending-common/ to ark/ - there is no incentive to enable it in ELN/RHEL at the moment. 2. Remove ark/generic/CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE - this config has been removed upstream. 3. De

[OS-BUILD PATCH 0/2] Enable BPF LSM on Fedora and ARK

2021-03-03 Thread via Email Bridge
From: Ondrej Mosnáček on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/922 ...and clean up a couple LSM-related configs while there. For more details see the commit messages. ___ kernel mailing list -- kernel@lists.