| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20241017110454.265818-8-ivanov.mikhail1@huawei-partners.com> Date: Thu, 17 Oct 2024 19:04:53 +0800 From: Mikhail Ivanov <ivanov.mikhail1@...wei-partners.com> To: <mic@...ikod.net>, <gnoack@...gle.com> CC: <willemdebruijn.kernel@...il.com>, <matthieu@...fet.re>, <linux-security-module@...r.kernel.org>, <netdev@...r.kernel.org>, <netfilter-devel@...r.kernel.org>, <yusongping@...wei.com>, <artem.kuzin@...wei.com>, <konstantin.meskhidze@...wei.com> Subject: [RFC PATCH v2 7/8] landlock: Add note about errors consistency in documentation Add recommendation to specify Landlock first in CONFIG_LSM list, so user can have better LSM errors consistency provided by Landlock. Signed-off-by: Mikhail Ivanov <ivanov.mikhail1@...wei-partners.com> --- Documentation/userspace-api/landlock.rst | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Documentation/userspace-api/landlock.rst b/Documentation/userspace-api/landlock.rst index bb7480a05e2c..0db5eee9bffa 100644 --- a/Documentation/userspace-api/landlock.rst +++ b/Documentation/userspace-api/landlock.rst @@ -610,7 +610,8 @@ time as the other security modules. The list of security modules enabled by default is set with ``CONFIG_LSM``. The kernel configuration should then contains ``CONFIG_LSM=landlock,[...]`` with ``[...]`` as the list of other potentially useful security modules for the running system (see the -``CONFIG_LSM`` help). +``CONFIG_LSM`` help). It is recommended to specify Landlock first of all other +modules in CONFIG_LSM list since it provides better errors consistency. Boot time configuration ----------------------- -- 2.34.1
Powered by blists - more mailing lists