Re: [arch-general] [arch-dev-public] Trimming down our default kernel configuration

On Thu, Mar 27, 2014 at 5:46 AM, Thomas Bächler

The fact that these LSMs must be compiled into the kernel and cannot be built as modules tells you something important: These options change the behaviour of the kernel at its core.

I was under the impression that this was s security feature to make it a bit more difficult to switch off your configured LSM. -- Pete