aboutsummaryrefslogtreecommitdiffstats
path: root/dashboard/config/linux/bits/apparmor.yml
Commit message (Collapse)AuthorAgeFilesLines
* dashboard/config/linux: update upstream configsDmitry Vyukov2022-11-141-2/+1
| | | | | | | | | | | | | | | | | | | | | Update linux upstream configs to the latest mainline/linux-next tags. - RANDOM_TRUST_CPU was removed (defaults to y) - RANDOM_TRUST_BOOTLOADER was removed (defaults to y) - X86_SGX now requires X86_X2APIC - DRM_VMWGFX_FBCON was removed - ANDROID was removed - NFT_OBJREF was removed - CAN_SLCAN now requires new CAN_NETLINK - CRYPTO_BLAKE2S was split into CRYPTO_BLAKE2S_X86 and CRYPTO_BLAKE2S_ARM - DEBUG_VM_VMACACHE was removed - CONTEXT_TRACKING_FORCE was removed - DRM_DP_AUX_CHARDEV now requires DRM_I915 (or some other DRM driver) - CRYPTO_SM4 was split into x86_64 amd arm64 configs - ARM_CRYPTO was removed - BINFMT_SHARED_FLAT was removed Also update all configs that were marked as linux-next.
* dashboard/config/linux: update upstream configsDmitry Vyukov2022-01-271-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update mainline and linux-next revisions to the latest tags and fix configs that broke. NF_FLOW_TABLE_IPV4/6 were removed in: commit c42ba4290b2147aa033d17f22151494515655d77 netfilter: flowtable: remove ipv4/ipv6 modules CONFIG_DAX_DRIVER was removed in: commit afd586f0d06ce3d81b7c474499630fec88833828 dax: remove CONFIG_DAX_DRIVER BLK_DEV_CRYPTOLOOP was removed in: commit 47e9624616c80c9879feda536c48c6a3a0ed9835 block: remove support for cryptoloop and the xor transfer NFT_COUNTER was removed in: commit 023223dfbfb34fcc9b7dd41e21fbf9a5d5237989 netfilter: nf_tables: make counter support built-in ICST was renamed to CLK_ICST in: commit 323fd5955f844d1b6acf1a1af488da460f657ff2 clk: versatile: Rename ICST to CLK_ICST APPARMOR_INTROSPECT_POLICY was added as requirement for other configs we enabled in: commit abfb9c0725f274c75ca2a51684c2dd842a8dc254 apparmor: make export of raw binary profile to userspace optional
* dashboard/config/linux: enable LandlockMickaël Salaün2021-03-191-1/+1
| | | | | | Add config fragments for Landlock LSM. Signed-off-by: Mickaël Salaün <mic@linux.microsoft.com>
* dashboard/config/linux: specify LSM in configsDmitry Vyukov2020-10-211-0/+2
| | | | | | | | | | | | | | | | | We used command line arguments to select LSM beause we did not have a good way to manage lots of configs. The problem is that command line arguments are not captures/provided with bug reports, so the configs we provided could not reproduce the bug for developers. We also had to duplicate .cmdline files 3 times. Now that we have a good way to manager lots of configs, embed LSM into the config. Now that we have 3 configs also switch apparmor and smack to SLUB. SLUB is the default for a very long time. Leave SLAB only on selinux. Update #2171
* dashboard/config/linux: set more configs explicitlyDmitry Vyukov2020-10-211-0/+2
| | | | | | | Next change will make fewer configs enabled implicitly, so make more configs explicit in preparation. Update #2171
* dashboard/config/linux: add config fragmentsDmitry Vyukov2020-10-211-0/+9
Add config fragments for the new config generation system. Update #2171