On 1/14/25 2:59 PM, Tetsuo Handa wrote: > On 2025/01/15 7:51, Randy Dunlap wrote: >> Use "lsm=name,..." instead "security=name,..." since the latter is >> deprecated. > > Sorry, but security= is for specifying only one of exclusive LSM modules > whereas lsm= is for specifying both one of exclusive LSM modules and > all of non-exclusive LSM modules. That is, you can't deprecate > security= using s/security=/lsm=/g . > OK, thanks for the feedback. I am still confused by this part though, in Documentation/doc-guide/kernel-parameters.txt: security= [SECURITY] Choose a legacy "major" security module to enable at boot. This has been deprecated by the "lsm=" parameter. -- ~Randy
