From patchwork Thu Oct 27 08:42:03 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Paolo Pisati X-Patchwork-Id: 1695326 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@legolas.ozlabs.org Authentication-Results: legolas.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=lists.ubuntu.com (client-ip=91.189.94.19; helo=huckleberry.canonical.com; envelope-from=kernel-team-bounces@lists.ubuntu.com; receiver=) Authentication-Results: legolas.ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=canonical.com header.i=@canonical.com header.a=rsa-sha256 header.s=20210705 header.b=XfbK8/Ci; dkim-atps=neutral Received: from huckleberry.canonical.com (huckleberry.canonical.com [91.189.94.19]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by legolas.ozlabs.org (Postfix) with ESMTPS id 4MyfMF6jCpz23kp for ; Thu, 27 Oct 2022 19:42:49 +1100 (AEDT) Received: from localhost ([127.0.0.1] helo=huckleberry.canonical.com) by huckleberry.canonical.com with esmtp (Exim 4.86_2) (envelope-from ) id 1onyTK-0006n0-Lr; Thu, 27 Oct 2022 08:42:42 +0000 Received: from smtp-relay-internal-0.internal ([10.131.114.225] helo=smtp-relay-internal-0.canonical.com) by huckleberry.canonical.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.86_2) (envelope-from ) id 1onySz-0006B8-Uh for kernel-team@lists.ubuntu.com; Thu, 27 Oct 2022 08:42:21 +0000 Received: from mail-wm1-f72.google.com (mail-wm1-f72.google.com [209.85.128.72]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by smtp-relay-internal-0.canonical.com (Postfix) with ESMTPS id E283042400 for ; Thu, 27 Oct 2022 08:42:19 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=canonical.com; s=20210705; t=1666860139; bh=BGY7S+FJTvjrlbC5dH5aB4xWz3l+GJ3Y1n9iDVgT+Ls=; h=From:To:Subject:Date:Message-Id:In-Reply-To:References: MIME-Version; b=XfbK8/Cih25nIqHVEXWsYPc5v2/zTTlTBBf2xhPDvAducWQ5IVtCFWrD0o9VE50hj TiJZa8eTDZZkusvlhpJ33cKJaJhoaI8LvKv7Niv9WqaBoe2rQQis/f6XXCnX0RNFN+ WDT5IxiMxlirJxhg29OlNORS+6a3kxc5AHF4vvMZ7rjlo99MPVPV0FwrIB0b8SjQ35 58bhEAQZIjUfaaKavCxFTzKuVNxRWAzwYhsvO62MawcmPr4tEb+HDVyWOZ9Vv0N4XS wLTIWVpk9dEp8cOZP5upr1TGZUHQxNXlqh1IQBOg3xojQxuuZ5gdoJ0WJTe7c79CFj xTviP2mADFINA== Received: by mail-wm1-f72.google.com with SMTP id c130-20020a1c3588000000b003b56be513e1so416367wma.0 for ; Thu, 27 Oct 2022 01:42:19 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=BGY7S+FJTvjrlbC5dH5aB4xWz3l+GJ3Y1n9iDVgT+Ls=; b=BYg2mJxr7DfAZZ0f96w8kESIYJdotnMWKrgtJp6eHd10EUY6h24+rVTRXfmRr/LgyB 6aiyvJKcQQrxpoxxz/nCkGTcEfJu0gR+L3w2g1M0VR7qhlofEJ/UoiwISCJjiR6L0DLe zD4os1RPvgfOaDu0CztNALTKdOgHj0G273/N/7gj1YuGibZFCy182+bJ+pucwyFm1bFL LG7deVN1TBUSfi573cVZYDYRsbNCzPHSU3gkpIwmnZ3JVwSHsJcpCCgClsmNq5RlsEoM K+eG7WuxFClhECxUF6rv3/KVJj37/qLGUi4Z3XCef7ZIzPWqzJclogZPTTYeAAkcAJBM lH/g== X-Gm-Message-State: ACrzQf2JiKxCWIXKtsYVqxzEAhBs5pcmrYaSngureyA7kO3axR3fbIsT +uzZJm5ACwCCY0F1B8djb2PGOtZsdtaOtmz1Cftqsh5wNTCGVkkur684n27dfRA+s4bdHZhmOWe uvF1A9C6l2X3RiZeL7iZ/rz5C08dYhh/oFYVIbLEvhw== X-Received: by 2002:a5d:54d0:0:b0:236:5430:cde3 with SMTP id x16-20020a5d54d0000000b002365430cde3mr20529858wrv.424.1666860139374; Thu, 27 Oct 2022 01:42:19 -0700 (PDT) X-Google-Smtp-Source: AMsMyM6XbdIXq1HiFMNWzOZ4s3WBCVLbzxknu4vTRTCmVDl9v1JXyJM6cQPpdsVgWnEW0rI09yfsvg== X-Received: by 2002:a5d:54d0:0:b0:236:5430:cde3 with SMTP id x16-20020a5d54d0000000b002365430cde3mr20529845wrv.424.1666860139175; Thu, 27 Oct 2022 01:42:19 -0700 (PDT) Received: from canonical.com (net-93-65-52-3.cust.vodafonedsl.it. [93.65.52.3]) by smtp.gmail.com with ESMTPSA id c9-20020adffb49000000b0022cc3e67fc5sm582832wrs.65.2022.10.27.01.42.18 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 27 Oct 2022 01:42:18 -0700 (PDT) From: Paolo Pisati To: kernel-team@lists.ubuntu.com Subject: [PATCH 14/14] UBUNTU: [Config] align LSM with master Date: Thu, 27 Oct 2022 10:42:03 +0200 Message-Id: <20221027084203.75281-15-paolo.pisati@canonical.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: <20221027084203.75281-1-paolo.pisati@canonical.com> References: <20221027084203.75281-1-paolo.pisati@canonical.com> MIME-Version: 1.0 X-BeenThere: kernel-team@lists.ubuntu.com X-Mailman-Version: 2.1.20 Precedence: list List-Id: Kernel team discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: kernel-team-bounces@lists.ubuntu.com Sender: "kernel-team" Signed-off-by: Paolo Pisati --- debian.kvm/config/config.common.ubuntu | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/debian.kvm/config/config.common.ubuntu b/debian.kvm/config/config.common.ubuntu index 80f0a68cb78c..2e88688f7bc5 100644 --- a/debian.kvm/config/config.common.ubuntu +++ b/debian.kvm/config/config.common.ubuntu @@ -1612,7 +1612,7 @@ CONFIG_LOG_CPU_MAX_BUF_SHIFT=12 # CONFIG_LOOPBACK_TARGET is not set # CONFIG_LPC_ICH is not set # CONFIG_LPC_SCH is not set -CONFIG_LSM="yama,loadpin,integrity,apparmor" +CONFIG_LSM="landlock,lockdown,yama,integrity,apparmor" CONFIG_LSM_MMAP_MIN_ADDR=0 CONFIG_LTO_NONE=y CONFIG_LWTUNNEL=y