[arch-general] [arch-dev-public] Trimming down our default kernel configuration

[Daniel Micay]

The audit support required by these can't be compiled in without it
being enabled. It's useless crap for anyone who isn't working for a
bureaucracy and it spams the logs. It is also completely broken with
namespaces, so it doesn't work at all with containers or application
sandboxes.

If and when this stuff can be built as *modules* with no impact on
people not making use of it and someone is willing to maintain the
userspace support in the official repositories, then enabling it may
make sense.

Until then, you can use any sane LSM module without recompiling the
kernel by building just the module you plan on using and loading it.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.archlinux.org/pipermail/arch-general/attachments/20140402/e857572d/attachment.asc>