summaryrefslogtreecommitdiff
path: root/security/Kconfig
diff options
context:
space:
mode:
authorKees Cook <keescook@chromium.org>2018-09-19 17:30:09 -0700
committerKees Cook <keescook@chromium.org>2019-01-08 13:18:42 -0800
commit79f7865d844c7703e3dc0e2f5b9ed2f3a4f412e5 (patch)
tree0e4804064ab81e886d5b9d0836abe27af5f155ed /security/Kconfig
parent13e735c0e953246bd531d342bb86acb5b1bf664a (diff)
LSM: Introduce "lsm=" for boottime LSM selection
Provide a way to explicitly choose LSM initialization order via the new "lsm=" comma-separated list of LSMs. Signed-off-by: Kees Cook <keescook@chromium.org>
Diffstat (limited to 'security/Kconfig')
-rw-r--r--security/Kconfig3
1 files changed, 2 insertions, 1 deletions
diff --git a/security/Kconfig b/security/Kconfig
index 7f21190cb677..cedf69e8a22c 100644
--- a/security/Kconfig
+++ b/security/Kconfig
@@ -281,7 +281,8 @@ config LSM
default "integrity"
help
A comma-separated list of LSMs, in initialization order.
- Any LSMs left off this list will be ignored.
+ Any LSMs left off this list will be ignored. This can be
+ controlled at boot with the "lsm=" parameter.
If unsure, leave this as the default.