[d-kernel] [PATCH] [6.12] config: add selinux to CONFIG_LSM

[Vitaly Chikunov]

Anton,

On Wed, May 13, 2026 at 03:19:15PM +0300, Anton Midyukov wrote:
> 21.03.2026 16:46, Vitaly Chikunov пишет:
> > On Tue, Mar 03, 2026 at 05:39:05PM +0300, Anton Midyukov wrote:
> >> This is necessary to use Selinux.
> >> Alternatively, can enable it in the kernel cmdline:
> >>   lsm=selinux,lockdown,capability,landlock,yama,safesetid,bpf,kiosk,ima,evm
> >> But this clutters the kernel cmdline.
> >> Signed-off-by: Anton Midyukov <antohami at altlinux.org>
> > 
> > Applied, thanks.
> > 
> > Только передвинул selinux после integrity.
> > 
> 
> Прошу включить и в 6.18.

Picked, thanks

  aefaa98ad5f1 N net/netlabel: Add mark s0 flag for NetLabel subsystem (6.12)
  aee1f8b1f607 N config: add selinux to CONFIG_LSM

> 
> >> ---
> >>  config | 2 +-
> >>  1 file changed, 1 insertion(+), 1 deletion(-)
> >>
> >> diff --git a/config b/config
> >> index 76dcac8f970d..ba51640d2b4f 100644
> >> --- a/config
> >> +++ b/config
> >> @@ -10125,7 +10125,7 @@ CONFIG_EVM_EXTRA_SMACK_XATTRS=y
> >>  # CONFIG_DEFAULT_SECURITY_SMACK is not set
> >>  # CONFIG_DEFAULT_SECURITY_APPARMOR is not set
> >>  CONFIG_DEFAULT_SECURITY_DAC=y
> >> -CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,bpf,altha,kiosk"
> >> +CONFIG_LSM="selinux,landlock,lockdown,yama,loadpin,safesetid,integrity,bpf,altha,kiosk"
> >>  
> >>  #
> >>  # Kernel hardening options
> >> -- 
> >> 2.50.1
> >>
> >> _______________________________________________
> >> devel-kernel mailing list
> >> devel-kernel at lists.altlinux.org
> >> https://lists.altlinux.org/mailman/listinfo/devel-kernel
> > _______________________________________________
> > devel-kernel mailing list
> > devel-kernel at lists.altlinux.org
> > https://lists.altlinux.org/mailman/listinfo/devel-kernel
> 
> -- 
> best regards, Anton Midyukov <antohami at altlinux.org>
> 
> _______________________________________________
> devel-kernel mailing list
> devel-kernel at lists.altlinux.org
> https://lists.altlinux.org/mailman/listinfo/devel-kernel