From: Peter Müller Date: Sun, 19 Dec 2021 17:40:06 +0000 (+0100) Subject: Kernel: Gate SETID transitions to limit CAP_SET(G|U)ID capabilities X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b36ab0b4417c6e95816b93417d8ba1a9a6cea3e3;p=people%2Fpmueller%2Fipfire-2.x.git Kernel: Gate SETID transitions to limit CAP_SET(G|U)ID capabilities Signed-off-by: Peter Müller --- diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire index e6a03a9e53..b325feb1d8 100644 --- a/config/kernel/kernel.config.x86_64-ipfire +++ b/config/kernel/kernel.config.x86_64-ipfire @@ -6971,7 +6971,7 @@ CONFIG_FORTIFY_SOURCE=y CONFIG_SECURITY_LOADPIN=y CONFIG_SECURITY_LOADPIN_ENFORCE=y # CONFIG_SECURITY_YAMA is not set -# CONFIG_SECURITY_SAFESETID is not set +CONFIG_SECURITY_SAFESETID=y # CONFIG_SECURITY_LOCKDOWN_LSM is not set # CONFIG_SECURITY_LANDLOCK is not set CONFIG_INTEGRITY=y