[arch-commits] Commit in linux/trunk (PKGBUILD config)

Jan Steffens heftig at archlinux.org
Tue May 7 20:04:22 UTC 2019


    Date: Tuesday, May 7, 2019 @ 20:04:22
  Author: heftig
Revision: 352734

Disable integrity, enable safesetid, only load yama by default

Modified:
  linux/trunk/PKGBUILD
  linux/trunk/config

----------+
 PKGBUILD |    2 +-
 config   |   10 +++-------
 2 files changed, 4 insertions(+), 8 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2019-05-07 18:22:31 UTC (rev 352733)
+++ PKGBUILD	2019-05-07 20:04:22 UTC (rev 352734)
@@ -26,7 +26,7 @@
   '8218F88849AAC522E94CF470A5E9288C4FA415FA'  # Jan Alexander Steffens (heftig)
 )
 sha256sums=('SKIP'
-            'd1ad8403bfc9681bddf42300b1b51d8975506b91e791e341f839797513208eff'
+            '02390efe7637927502bc834daf3f413ea5e2cb084bca125372e70dc9438e824c'
             'ae2e95db94ef7176207c690224169594d49445e04249d2499e9d2fbc117a0b21'
             'c043f3033bb781e2688794a59f6d1f7ed49ef9b13eb77ff9a425df33a244a636'
             'ad6344badc91ad0630caacde83f7f9b97276f80d26a20619a87952be65492c65')

Modified: config
===================================================================
--- config	2019-05-07 18:22:31 UTC (rev 352733)
+++ config	2019-05-07 20:04:22 UTC (rev 352734)
@@ -9330,18 +9330,14 @@
 # CONFIG_SECURITY_APPARMOR_DEBUG is not set
 # CONFIG_SECURITY_LOADPIN is not set
 CONFIG_SECURITY_YAMA=y
-# CONFIG_SECURITY_SAFESETID is not set
-CONFIG_INTEGRITY=y
-# CONFIG_INTEGRITY_SIGNATURE is not set
-CONFIG_INTEGRITY_AUDIT=y
-# CONFIG_IMA is not set
-# CONFIG_EVM is not set
+CONFIG_SECURITY_SAFESETID=y
+# CONFIG_INTEGRITY is not set
 # CONFIG_DEFAULT_SECURITY_SELINUX is not set
 # CONFIG_DEFAULT_SECURITY_SMACK is not set
 # CONFIG_DEFAULT_SECURITY_TOMOYO is not set
 # CONFIG_DEFAULT_SECURITY_APPARMOR is not set
 CONFIG_DEFAULT_SECURITY_DAC=y
-CONFIG_LSM="yama,loadpin,safesetid,integrity"
+CONFIG_LSM="yama"
 CONFIG_XOR_BLOCKS=m
 CONFIG_ASYNC_CORE=m
 CONFIG_ASYNC_MEMCPY=m



More information about the arch-commits mailing list