Re: [PATCH v2] LSM: Ignore "security=" when "lsm=" is specified
From: Paul Moore <paul@paul-moore.com>
Date: 2019-02-18 02:46:12
Also in:
lkml, selinux
From: Paul Moore <paul@paul-moore.com>
Date: 2019-02-18 02:46:12
Also in:
lkml, selinux
On Sun, Feb 17, 2019 at 12:17 AM Tetsuo Handa [off-list ref] wrote:
On 2019/02/14 1:05, Casey Schaufler wrote:quoted
On 2/12/2019 10:23 AM, Kees Cook wrote:quoted
To avoid potential confusion, explicitly ignore "security=" when "lsm=" is used on the command line, and report that it is happening. Suggested-by: Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp> Signed-off-by: Kees Cook <redacted>Acked-by: Casey Schaufler <casey@schaufler-ca.com>The manual for TOMOYO was updated to follow this change. SELinux folks and AppArmor folks, can we apply this change?
My main concern is that "selinux={0|1}" continues to work as it has
for years. It doesn't look like this affects that, but I can't say
I've dug into these changes very far.
--
paul moore
www.paul-moore.com