diff mbox series

[SRU,G/raspi] UBUNTU: [Config] raspi: SECURITY_DMESG_RESTRICT=y

Message ID 20201106131859.84878-1-juergh@canonical.com
State New
Headers show
Series [SRU,G/raspi] UBUNTU: [Config] raspi: SECURITY_DMESG_RESTRICT=y | expand

Commit Message

Juerg Haefliger Nov. 6, 2020, 1:18 p.m. UTC
BugLink: https://bugs.launchpad.net/bugs/1902934

Signed-off-by: Juerg Haefliger <juergh@canonical.com>
---
 debian.raspi/config/config.common.ubuntu | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comments

Thadeu Lima de Souza Cascardo Nov. 6, 2020, 1:31 p.m. UTC | #1
On Fri, Nov 06, 2020 at 02:18:59PM +0100, Juerg Haefliger wrote:
> BugLink: https://bugs.launchpad.net/bugs/1902934
> 
> Signed-off-by: Juerg Haefliger <juergh@canonical.com>
> ---
>  debian.raspi/config/config.common.ubuntu | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/debian.raspi/config/config.common.ubuntu b/debian.raspi/config/config.common.ubuntu
> index b720859898c4..00fe29a91b89 100644
> --- a/debian.raspi/config/config.common.ubuntu
> +++ b/debian.raspi/config/config.common.ubuntu
> @@ -6211,7 +6211,7 @@ CONFIG_SECURITY_APPARMOR=y
>  # CONFIG_SECURITY_APPARMOR_DEBUG is not set
>  CONFIG_SECURITY_APPARMOR_HASH=y
>  CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
> -# CONFIG_SECURITY_DMESG_RESTRICT is not set
> +CONFIG_SECURITY_DMESG_RESTRICT=y
>  # CONFIG_SECURITY_INFINIBAND is not set
>  # CONFIG_SECURITY_LOADPIN is not set
>  CONFIG_SECURITY_LOCKDOWN_LSM=y
> -- 
> 2.25.1

Acked-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Andrea Righi Nov. 9, 2020, 6:31 p.m. UTC | #2
On Fri, Nov 06, 2020 at 02:18:59PM +0100, Juerg Haefliger wrote:
> BugLink: https://bugs.launchpad.net/bugs/1902934
> 
> Signed-off-by: Juerg Haefliger <juergh@canonical.com>

Acked-by: Andrea Righi <andrea.righi@canonical.com>

> ---
>  debian.raspi/config/config.common.ubuntu | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/debian.raspi/config/config.common.ubuntu b/debian.raspi/config/config.common.ubuntu
> index b720859898c4..00fe29a91b89 100644
> --- a/debian.raspi/config/config.common.ubuntu
> +++ b/debian.raspi/config/config.common.ubuntu
> @@ -6211,7 +6211,7 @@ CONFIG_SECURITY_APPARMOR=y
>  # CONFIG_SECURITY_APPARMOR_DEBUG is not set
>  CONFIG_SECURITY_APPARMOR_HASH=y
>  CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
> -# CONFIG_SECURITY_DMESG_RESTRICT is not set
> +CONFIG_SECURITY_DMESG_RESTRICT=y
>  # CONFIG_SECURITY_INFINIBAND is not set
>  # CONFIG_SECURITY_LOADPIN is not set
>  CONFIG_SECURITY_LOCKDOWN_LSM=y
> -- 
> 2.25.1
> 
> 
> -- 
> kernel-team mailing list
> kernel-team@lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team
Juerg Haefliger Nov. 17, 2020, 7:42 a.m. UTC | #3
Applied to groovy:linux-raspi master-next.

...Juerg


> BugLink: https://bugs.launchpad.net/bugs/1902934
> 
> Signed-off-by: Juerg Haefliger <juergh@canonical.com>
> ---
>  debian.raspi/config/config.common.ubuntu | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/debian.raspi/config/config.common.ubuntu b/debian.raspi/config/config.common.ubuntu
> index b720859898c4..00fe29a91b89 100644
> --- a/debian.raspi/config/config.common.ubuntu
> +++ b/debian.raspi/config/config.common.ubuntu
> @@ -6211,7 +6211,7 @@ CONFIG_SECURITY_APPARMOR=y
>  # CONFIG_SECURITY_APPARMOR_DEBUG is not set
>  CONFIG_SECURITY_APPARMOR_HASH=y
>  CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
> -# CONFIG_SECURITY_DMESG_RESTRICT is not set
> +CONFIG_SECURITY_DMESG_RESTRICT=y
>  # CONFIG_SECURITY_INFINIBAND is not set
>  # CONFIG_SECURITY_LOADPIN is not set
>  CONFIG_SECURITY_LOCKDOWN_LSM=y
diff mbox series

Patch

diff --git a/debian.raspi/config/config.common.ubuntu b/debian.raspi/config/config.common.ubuntu
index b720859898c4..00fe29a91b89 100644
--- a/debian.raspi/config/config.common.ubuntu
+++ b/debian.raspi/config/config.common.ubuntu
@@ -6211,7 +6211,7 @@  CONFIG_SECURITY_APPARMOR=y
 # CONFIG_SECURITY_APPARMOR_DEBUG is not set
 CONFIG_SECURITY_APPARMOR_HASH=y
 CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
-# CONFIG_SECURITY_DMESG_RESTRICT is not set
+CONFIG_SECURITY_DMESG_RESTRICT=y
 # CONFIG_SECURITY_INFINIBAND is not set
 # CONFIG_SECURITY_LOADPIN is not set
 CONFIG_SECURITY_LOCKDOWN_LSM=y