kconfigcheck: Add SELinux category
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8352>
This commit is contained in:
parent
51940cbddc
commit
5d06fe0fd1
1 changed files with 9 additions and 0 deletions
|
|
@ -673,6 +673,15 @@ SHADOW_CALL_STACK = "y"
|
|||
DEBUG_INFO_BTF = "n" # Conflicts with LTO when Rust is enabled
|
||||
DEBUG_INFO_BTF_MODULES = "n" # Conflicts with LTO when Rust is enabled
|
||||
|
||||
# SELinux support, separate from hardening to keep it opt-in for now
|
||||
["category:selinux".">=0.0.0"."all"]
|
||||
DEFAULT_SECURITY_SELINUX = "y"
|
||||
AUDIT = "y" # Required by SELinux
|
||||
SECURITY_NETWORK = "y" # Required by SELinux
|
||||
SECURITY_SELINUX = "y"
|
||||
SECURITY_SELINUX_BOOTPARAM = "y"
|
||||
LSM = "landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf"
|
||||
|
||||
# Wine / Proton support
|
||||
["category:wine".">=6.14.0"."all"]
|
||||
NTSYNC = "m"
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue