Repository navigation

Commit 1487eaa

authored and

committed

kernel: Enable landlock LSM

Allows using landlock LSM for the container process Signed-off-by: Pradipta Banerjee <[email protected]>

1 parent 25491fc commit 1487eaaCopy full SHA for 1487eaa

2 files changed

tools/packaging/kernel
- configs/fragments/common
  - landlock.conf
- kata_config_version

`‎tools/packaging/kernel/configs/fragments/common/landlock.conf‎`

-Original file line number
+Diff line change
@@ @@ -0,0 +1,6 @@ @@
 +# Landlock LSM
 +#
 +# Enables the Landlock access-control LSM so that processes can apply
 +# filesystem and network sandboxing rules inside the kata guest VM.
 +#
 +CONFIG_SECURITY_LANDLOCK=y

`‎tools/packaging/kernel/kata_config_version‎`

Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-195`
	`1`	`+196`

Comments

(0)