Commit cde97d94 authored Jul 30, 2024 by cheliequan

enable CONFIG_BPF_LSM option by default to use safegurad

inspurcloud inclusion
category: feature
bugzilla: https://gitee.com/openeuler/kernel/issues/IAGNKW

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=641cd7b06c911c5935c34f24850ea18690649917



--------------------------------

Enabling CONFIG_BPF_LSM in the KConfig of openEuler Kernels,
allowing users to use BPF LSM programs.

CONFIG_BPF_LSM is enabled in Ubuntu 21.04 by default (Hirsute Hippo)

Signed-off-by: cheliequan <cheliequan@inspur.com>

parent 67f42125

arch/arm64/configs/openeuler_defconfig

+1 −1

Original line number	Diff line number	Diff line
		@@ -238,7 +238,7 @@ CONFIG_MEMBARRIER=y
		CONFIG_KALLSYMS=y
		CONFIG_KALLSYMS_ALL=y
		CONFIG_KALLSYMS_BASE_RELATIVE=y
		# CONFIG_BPF_LSM is not set
		CONFIG_BPF_LSM=y
		CONFIG_BPF_SCHED=y
		CONFIG_BPF_SYSCALL=y
		CONFIG_ARCH_WANT_DEFAULT_BPF_JIT=y

arch/x86/configs/openeuler_defconfig

+1 −1

Original line number	Diff line number	Diff line
		@@ -246,7 +246,7 @@ CONFIG_KALLSYMS=y
		CONFIG_KALLSYMS_ALL=y
		CONFIG_KALLSYMS_ABSOLUTE_PERCPU=y
		CONFIG_KALLSYMS_BASE_RELATIVE=y
		# CONFIG_BPF_LSM is not set
		CONFIG_BPF_LSM=y
		CONFIG_BPF_SCHED=y
		CONFIG_BPF_SYSCALL=y
		CONFIG_ARCH_WANT_DEFAULT_BPF_JIT=y