kconfigcheck: Add SELinux category

Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8352>
This commit is contained in:
Aelin 2026-04-12 15:11:02 +02:00 committed by The Friendly Meow (merge) Bot
parent 51940cbddc
commit 5d06fe0fd1
No known key found for this signature in database

View file

@ -673,6 +673,15 @@ SHADOW_CALL_STACK = "y"
DEBUG_INFO_BTF = "n" # Conflicts with LTO when Rust is enabled
DEBUG_INFO_BTF_MODULES = "n" # Conflicts with LTO when Rust is enabled
# SELinux support, separate from hardening to keep it opt-in for now
["category:selinux".">=0.0.0"."all"]
DEFAULT_SECURITY_SELINUX = "y"
AUDIT = "y" # Required by SELinux
SECURITY_NETWORK = "y" # Required by SELinux
SECURITY_SELINUX = "y"
SECURITY_SELINUX_BOOTPARAM = "y"
LSM = "landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf"
# Wine / Proton support
["category:wine".">=6.14.0"."all"]
NTSYNC = "m"