aboutsummaryrefslogtreecommitdiff
path: root/linux/linux.mk
diff options
context:
space:
mode:
authorGravatar Angelo Compagnucci <angelo@amarulasolutions.com>2020-03-27 20:55:04 +0100
committerGravatar Yann E. MORIN <yann.morin.1998@free.fr>2020-04-20 09:53:05 +0200
commit67e576fab524c6341d86aa34a8c93306533b6e1a (patch)
tree3b7453ab02d9a843a5b66697cc3586d7f4e0c451 /linux/linux.mk
parent01a82c14012370a3bdff15e6bd761acc10fd79f3 (diff)
downloadbuildroot-67e576fab524c6341d86aa34a8c93306533b6e1a.tar.gz
buildroot-67e576fab524c6341d86aa34a8c93306533b6e1a.tar.bz2
linux: enable AppArmor-related options if needed
Using AppArmor requires support in the kernel, so do for AppArmor what we did for SElinux, and enabled the necessary options. Note that a single LSM can be the default one, so as of today, SELinux wins, by virtue of being the last to be enabled. Signed-off-by: Angelo Compagnucci <angelo@amarulasolutions.com> [yann.morin.1998@free.fr: - don't force DEFAULT_SECURITY_APPARMOR, it does not exist in all kernel versions - move closer to SELinux - split into its own patch, write a commit log ] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Tested-by: Angelo Compagnucci <angelo@amarulasolutions.com>
Diffstat (limited to 'linux/linux.mk')
-rw-r--r--linux/linux.mk5
1 files changed, 5 insertions, 0 deletions
diff --git a/linux/linux.mk b/linux/linux.mk
index 3d9052a337..68c1121c4b 100644
--- a/linux/linux.mk
+++ b/linux/linux.mk
@@ -408,6 +408,11 @@ define LINUX_KCONFIG_FIXUP_CMDS
$(call KCONFIG_ENABLE_OPT,CONFIG_FB,$(@D)/.config)
$(call KCONFIG_ENABLE_OPT,CONFIG_LOGO,$(@D)/.config)
$(call KCONFIG_ENABLE_OPT,CONFIG_LOGO_LINUX_CLUT224,$(@D)/.config))
+ $(if $(BR2_PACKAGE_LIBAPPARMOR),
+ $(call KCONFIG_ENABLE_OPT,CONFIG_AUDIT,$(@D)/.config)
+ $(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY,$(@D)/.config)
+ $(call KCONFIG_ENABLE_OPT,CONFIG_SECURITY_APPARMOR,$(@D)/.config)
+ $(call KCONFIG_ENABLE_OPT,CONFIG_DEFAULT_SECURITY_APPARMOR,$(@D)/.config))
$(if $(BR2_PACKAGE_LIBSELINUX),
$(call KCONFIG_ENABLE_OPT,CONFIG_AUDIT,$(@D)/.config)
$(call KCONFIG_ENABLE_OPT,CONFIG_DEFAULT_SECURITY_SELINUX,$(@D)/.config)