Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

Docs: Update LSM/apparmor.rst

After the deprecation of CONFIG_DEFAULT_SECURITY, it is no longer used
to enable and configure AppArmor. Since kernel 5.0,
`CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE` is not used either.
Instead, the CONFIG_LSM parameter manages the order and selection of LSMs.

Signed-off-by: Siddharth Menon <simeddon@gmail.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>

authored by

Siddharth Menon and committed by
John Johansen
d00c2359 74a96bbe

+5 -2
+5 -2
Documentation/admin-guide/LSM/apparmor.rst
··· 18 18 19 19 If AppArmor should be selected as the default security module then set:: 20 20 21 - CONFIG_DEFAULT_SECURITY="apparmor" 22 - CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1 21 + CONFIG_DEFAULT_SECURITY_APPARMOR=y 22 + 23 + The CONFIG_LSM parameter manages the order and selection of LSMs. 24 + Specify apparmor as the first "major" module (e.g. AppArmor, SELinux, Smack) 25 + in the list. 23 26 24 27 Build the kernel 25 28