Bug#876437: linux: Please enable CONFIG_SECURITY_SELINUX_DISABLE

From	Ben Hutchings <ben@decadent.org.uk>
Newsgroups	linux.debian.bugs.dist, linux.debian.kernel
Subject	Bug#876437: linux: Please enable CONFIG_SECURITY_SELINUX_DISABLE
Date	2017-09-22 14:30 +0200
Message-ID	<usvfI-62z-15@gated-at.bofh.it> (permalink)
References	<ustdT-4TO-3@gated-at.bofh.it> <ustdT-4TO-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Control: tag -1 wontfix

On Fri, 2017-09-22 at 18:08 +0800, Yanhao Mo wrote:
> Source: linux
> Severity: wishlist
> 
> Dear Maintaners,
> 
> CONFIG_SECURITY_WRITABLE_HOOKS is nessesarry for write linux security
> modules which doesn't compile into vmlinuz. Writing a "linux security
> module" as a kernel module is impossible without enable this config.

I don't think that's possible anyway.

> Please enable this. It is very appreciated.

This is not a user-configurable Kconfig option, so we can't directly
enable it.  The help text for SECURITY_SELINUX_DISABLE, which selects
it, notes that this is bad for security.

So no, we won't do this.

Ben.

-- 
Ben Hutchings
Horngren's Observation:
              Among economists, the real world is often a special case.

Back to linux.debian.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Bug#876437: linux: Please enable CONFIG_SECURITY_SELINUX_DISABLE Yanhao Mo <yanhaocs@gmail.com> - 2017-09-22 12:20 +0200
  Processed: Re: Bug#876437: linux: Please enable CONFIG_SECURITY_SELINUX_DISABLE owner@bugs.debian.org (Debian Bug Tracking System) - 2017-09-22 14:30 +0200
  Bug#876437: linux: Please enable CONFIG_SECURITY_SELINUX_DISABLE Ben Hutchings <ben@decadent.org.uk> - 2017-09-22 14:30 +0200

csiph-web