[PATCH] LSM: SafeSetID: 'depend' on CONFIG_SECURITY
From: mortonm@chromium.org
Date: 2019-01-29 18:54:32
Also in:
linux-security-module, lkml
Subsystem:
safesetid security module, security subsystem, the rest · Maintainers:
Micah Morton, Paul Moore, James Morris, "Serge E. Hallyn", Linus Torvalds
From: Micah Morton <mortonm@chromium.org> This patch changes the Kconfig file for the SafeSetID LSM to depend on CONFIG_SECURITY as well as select CONFIG_SECURITYFS, since the policies for the LSM are configured through writing to securityfs. Signed-off-by: Micah Morton <mortonm@chromium.org> --- security/safesetid/Kconfig | 2 ++ 1 file changed, 2 insertions(+)
diff --git a/security/safesetid/Kconfig b/security/safesetid/Kconfig
index bf89a47ffcc8..4f415c4e3f93 100644
--- a/security/safesetid/Kconfig
+++ b/security/safesetid/Kconfig@@ -1,5 +1,7 @@ config SECURITY_SAFESETID bool "Gate setid transitions to limit CAP_SET{U/G}ID capabilities" + depends on SECURITY + select SECURITYFS default n help SafeSetID is an LSM module that gates the setid family of syscalls to
--
2.20.1.495.gaa96b0ce6b-goog