summaryrefslogtreecommitdiff
path: root/sys-kernel/cairn-sources/files/5.10.10/hardened-patches/0035-enable-SECURITY_YAMA-by-default.patch
diff options
context:
space:
mode:
Diffstat (limited to 'sys-kernel/cairn-sources/files/5.10.10/hardened-patches/0035-enable-SECURITY_YAMA-by-default.patch')
-rw-r--r--sys-kernel/cairn-sources/files/5.10.10/hardened-patches/0035-enable-SECURITY_YAMA-by-default.patch25
1 files changed, 25 insertions, 0 deletions
diff --git a/sys-kernel/cairn-sources/files/5.10.10/hardened-patches/0035-enable-SECURITY_YAMA-by-default.patch b/sys-kernel/cairn-sources/files/5.10.10/hardened-patches/0035-enable-SECURITY_YAMA-by-default.patch
new file mode 100644
index 000000000000..54cb4841cd13
--- /dev/null
+++ b/sys-kernel/cairn-sources/files/5.10.10/hardened-patches/0035-enable-SECURITY_YAMA-by-default.patch
@@ -0,0 +1,25 @@
+From 3b19a3be274e63c9a6df2ae0ea097e88e6838ce2 Mon Sep 17 00:00:00 2001
+From: Daniel Micay <danielmicay@gmail.com>
+Date: Mon, 29 May 2017 06:17:59 -0400
+Subject: [PATCH 035/113] enable SECURITY_YAMA by default
+
+---
+ security/yama/Kconfig | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/security/yama/Kconfig b/security/yama/Kconfig
+index a810304123ca..b809050b25d2 100644
+--- a/security/yama/Kconfig
++++ b/security/yama/Kconfig
+@@ -2,7 +2,7 @@
+ config SECURITY_YAMA
+ bool "Yama support"
+ depends on SECURITY
+- default n
++ default y
+ help
+ This selects Yama, which extends DAC support with additional
+ system-wide security settings beyond regular Linux discretionary
+--
+2.30.0
+