deepin: config: x86_desktop_defconfig: enable landlock

deepin inclusion
category: feature

enable landlock for our x86 config, it has been enabled in our riscv, arm64
and loongarch config, enable it in x86, and it will be used in pacman.

Also edit LSM, add landlock for x86 and loongarch.

Link: https://bbs.deepin.org.cn/post/295333
Signed-off-by: Wentao Guan <guanwentao@uniontech.com>

Author: opsiff

arch/loongarch/configs/deepin_loongarch_desktop_defconfig

@@ -5879,7 +5879,7 @@ CONFIG_EVM=y
 CONFIG_EVM_EXTRA_SMACK_XATTRS=y
 CONFIG_EVM_ADD_XATTRS=y
 CONFIG_DEFAULT_SECURITY_APPARMOR=y
-CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity,apparmor,selinux,smack,tomoyo,bpf"
+CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,apparmor,selinux,smack,tomoyo,bpf"
 CONFIG_INIT_STACK_NONE=y
 CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
 CONFIG_LIST_HARDENED=y

arch/x86/configs/deepin_x86_desktop_defconfig

@@ -5755,6 +5755,7 @@ CONFIG_SECURITY_YAMA=y
 CONFIG_SECURITY_SAFESETID=y
 CONFIG_SECURITY_LOCKDOWN_LSM=y
 CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y
+CONFIG_SECURITY_LANDLOCK=y
 CONFIG_INTEGRITY_SIGNATURE=y
 CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
 CONFIG_INTEGRITY_PLATFORM_KEYRING=y
@@ -5768,7 +5769,7 @@ CONFIG_EVM=y
 CONFIG_EVM_EXTRA_SMACK_XATTRS=y
 CONFIG_EVM_ADD_XATTRS=y
 CONFIG_DEFAULT_SECURITY_APPARMOR=y
-CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity,apparmor,selinux,smack,tomoyo,bpf"
+CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,apparmor,selinux,smack,tomoyo,bpf"
 CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
 CONFIG_LIST_HARDENED=y
 CONFIG_CRYPTO_USER=m