Skip to content

Commit d00c235

Browse files
BiscuitBobbyjrjohansen
authored andcommitted
Docs: Update LSM/apparmor.rst
After the deprecation of CONFIG_DEFAULT_SECURITY, it is no longer used to enable and configure AppArmor. Since kernel 5.0, `CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE` is not used either. Instead, the CONFIG_LSM parameter manages the order and selection of LSMs. Signed-off-by: Siddharth Menon <[email protected]> Signed-off-by: John Johansen <[email protected]>
1 parent 74a96bb commit d00c235

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

Documentation/admin-guide/LSM/apparmor.rst

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,8 +18,11 @@ set ``CONFIG_SECURITY_APPARMOR=y``
1818

1919
If AppArmor should be selected as the default security module then set::
2020

21-
CONFIG_DEFAULT_SECURITY="apparmor"
22-
CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1
21+
CONFIG_DEFAULT_SECURITY_APPARMOR=y
22+
23+
The CONFIG_LSM parameter manages the order and selection of LSMs.
24+
Specify apparmor as the first "major" module (e.g. AppArmor, SELinux, Smack)
25+
in the list.
2326

2427
Build the kernel
2528

0 commit comments

Comments
 (0)