bool "NSA SELinux Development Support"
depends on KERNEL_SECURITY_SELINUX
-choice
- prompt "First legacy 'major LSM' to be initialized"
+config KERNEL_LSM
+ string
+ default "lockdown,yama,loadpin,safesetid,integrity,selinux"
depends on KERNEL_SECURITY_SELINUX
- default KERNEL_DEFAULT_SECURITY_SELINUX
-
- config KERNEL_DEFAULT_SECURITY_SELINUX
- bool "SELinux"
-
- config KERNEL_DEFAULT_SECURITY_DAC
- bool "Unix Discretionary Access Controls"
-
-endchoice
config KERNEL_EXT4_FS_SECURITY
bool "Ext4 Security Labels"