]> git.ipfire.org Git - thirdparty/linux.git/commit
lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY
authorPaul Moore <paul@paul-moore.com>
Thu, 29 Jan 2026 18:31:56 +0000 (13:31 -0500)
committerPaul Moore <paul@paul-moore.com>
Thu, 29 Jan 2026 18:56:53 +0000 (13:56 -0500)
commitbdde21d3e77da55121885fd2ef42bc6a15ac2f0c
tree19d99919debfcbc83af63e4193b1abd8b6a91b94
parent63804fed149a6750ffd28610c5c1c98cce6bd377
lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY

While reworking the LSM initialization code the
/proc/sys/vm/mmap_min_addr handler was inadvertently caught up in the
change and the procfs entry wasn't setup when CONFIG_SECURITY was not
selected at kernel build time.  This patch restores the previous behavior
and ensures that the procfs entry is setup regardless of the
CONFIG_SECURITY state.

Future work will improve upon this, likely by moving the procfs handler
into the mm subsystem, but this patch should resolve the immediate
regression.

Fixes: 4ab5efcc2829 ("lsm: consolidate all of the LSM framework initcalls")
Reported-by: Lorenzo Stoakes <lorenzo.stoakes@oracle.com>
Reviewed-by: Lorenzo Stoakes <lorenzo.stoakes@oracle.com>
Tested-by: Lorenzo Stoakes <lorenzo.stoakes@oracle.com>
Reviewed-by: Kees Cook <kees@kernel.org>
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/lsm.h
security/lsm_init.c
security/min_addr.c