Re: [PATCH v3 3/5] fs: Enable to enforce noexec mounts or file exec through RESOLVE_MAYEXEC
- From
- James Morris <jmorris@namei.org>
- Date
- 2020-05-01 18:07:27
- Also in
- linux-fsdevel, linux-security-module, lkml
- Reply to
- Mickaël Salaün, 2020-05-01
On Fri, 1 May 2020, Mickaël Salaün wrote:
However, for fully controlled distros such as CLIP OS, it make sense to enforce such restrictions at kernel build time. I can add an alternative kernel configuration to enforce a particular policy at boot and disable this sysctl.
Sounds good. -- James Morris [off-list ref]