diff options
| author | Kees Cook <keescook@chromium.org> | 2018-09-19 17:30:09 -0700 |
|---|---|---|
| committer | Kees Cook <keescook@chromium.org> | 2019-01-08 13:18:42 -0800 |
| commit | 79f7865d844c7703e3dc0e2f5b9ed2f3a4f412e5 (patch) | |
| tree | 0e4804064ab81e886d5b9d0836abe27af5f155ed /security/Kconfig | |
| parent | 13e735c0e953246bd531d342bb86acb5b1bf664a (diff) | |
LSM: Introduce "lsm=" for boottime LSM selection
Provide a way to explicitly choose LSM initialization order via the new
"lsm=" comma-separated list of LSMs.
Signed-off-by: Kees Cook <keescook@chromium.org>
Diffstat (limited to 'security/Kconfig')
| -rw-r--r-- | security/Kconfig | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/security/Kconfig b/security/Kconfig index 7f21190cb677..cedf69e8a22c 100644 --- a/security/Kconfig +++ b/security/Kconfig @@ -281,7 +281,8 @@ config LSM default "integrity" help A comma-separated list of LSMs, in initialization order. - Any LSMs left off this list will be ignored. + Any LSMs left off this list will be ignored. This can be + controlled at boot with the "lsm=" parameter. If unsure, leave this as the default. |