From ba9b6702aa3e95fa5a3a8aaa9e95c2d1e073f2f2 Mon Sep 17 00:00:00 2001 From: Daniel Golle Date: Fri, 16 Oct 2020 14:27:34 +0100 Subject: config: clean up SELinux options In order to make it easier for users to build with SELinux, have a single option in 'Global build settings' to enable all necessary kernel features, userland packages and build-system hooks. Also add better descriptions and help messages while at it. Signed-off-by: Daniel Golle --- config/Config-kernel.in | 2 ++ 1 file changed, 2 insertions(+) (limited to 'config/Config-kernel.in') diff --git a/config/Config-kernel.in b/config/Config-kernel.in index 32383dadab..dcf6df97ad 100644 --- a/config/Config-kernel.in +++ b/config/Config-kernel.in @@ -1124,6 +1124,7 @@ config KERNEL_SECURITY_SELINUX config KERNEL_SECURITY_SELINUX_BOOTPARAM bool "NSA SELinux boot parameter" depends on KERNEL_SECURITY_SELINUX + default y config KERNEL_SECURITY_SELINUX_DISABLE bool "NSA SELinux runtime disable" @@ -1132,6 +1133,7 @@ config KERNEL_SECURITY_SELINUX_DISABLE config KERNEL_SECURITY_SELINUX_DEVELOP bool "NSA SELinux Development Support" depends on KERNEL_SECURITY_SELINUX + default y config KERNEL_LSM string -- cgit v1.2.3