Docs: Update LSM/apparmor.rst
Subsystems (2)
PATCH v2 1/1 Docs: Update LSM/apparmor.rst
Docs: Update LSM/apparmor.rst
After the deprecation of CONFIG_DEFAULT_SECURITY, it is no longer used to enable and configuring AppArmor.
Since kernel 5.0, CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE is not used either. Instead, the CONFIG_LSM parameter manages the order and selection of LSMs.
---
V1 -> V2: Removed historical information and addressed review comments
Documentation/admin-guide/LSM/apparmor.rst | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-)
Documentation/admin-guide/LSM/apparmor.rst +5 -2
@@ -18,8 +18,11 @@ set ``CONFIG_SECURITY_APPARMOR=y`` If AppArmor should be selected as the default security module then set:: - CONFIG_DEFAULT_SECURITY="apparmor" - CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1 + CONFIG_DEFAULT_SECURITY_APPARMOR=y + +The CONFIG_LSM parameter manages the order and selection of LSMs. +Specify apparmor as the first "major" module (e.g. AppArmor, SELinux, Smack) +in the list. Build the kernel
Signature · 1 line
2.39.2
Quoted 23 lines
Docs: Update
LSM/apparmor.rstAfter the deprecation of
CONFIG_DEFAULT_SECURITY, it is no longer used to enable and configuring AppArmor.
Since kernel 5.0,CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUEis not used either. Instead, theCONFIG_LSMparameter manages the order and selection of LSMs.Signed-off-by Siddharth Menon<[email protected]>---
V1 -> V2: Removed historical information and addressed review commentsDocumentation/admin-guide/LSM/apparmor.rst | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-)Documentation/admin-guide/LSM/apparmor.rst +0
-0@@ -18,8 +18,11 @@ set ``CONFIG_SECURITY_APPARMOR=y`` If AppArmor should be selected as the default security module then set::
Documentation/admin-guide/LSM/apparmor.rst set ``CONFIG_SECURITY_APPARMOR=y`` · line 28
Quoted 10 lines
Documentation/admin-guide/LSM/apparmor.rst +5
-2- CONFIG_DEFAULT_SECURITY="apparmor" - CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1 + CONFIG_DEFAULT_SECURITY_APPARMOR=y + +The CONFIG_LSM parameter manages the order and selection of LSMs. +Specify apparmor as the first "major" module (e.g. AppArmor, SELinux, Smack) +in the list. Build the kernel
I had accidentally added an extra '=' before the recipient mail and [email protected] while using git send-email.
Really sorry about this.
Thanks,
Siddharth