From: Michael Tremer <michael.tremer@ipfire.org>
Date: Mon, 8 Apr 2024 16:01:20 +0000 (+0000)
Subject: suricata: Disable Landlock support
X-Git-Tag: v2.29-core185~2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b7da97fd59f010ea8fa7bca845d18e52ca89bc5a;p=ipfire-2.x.git

suricata: Disable Landlock support

See #13645 for details.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index d44d4e9f7c..dc142d6906 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -768,7 +768,7 @@ security:
   limit-noproc: true
   # Use landlock security module under Linux
   landlock:
-    enabled: yes
+    enabled: no
     directories:
       write:
         - /run