> We should explain in this context: > > * string "lockdown" in CONFIG_LSM > * CONFIG_SECURITY_LOCKDOWN_LSM > * CONFIG_SECURITY_LOCKDOWN_LSM_EARLY > * CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE > * CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY > * CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY > > The relationship between CONFIG_LSM and CONFIG_SECURITY_LOCKDOWN_LSM is > not obvious in the Kconfig menu as CONFIG_LSM does not mention which > modules are available and CONFIG_SECURITY_LOCKDOWN_LSM does not mention > that it depends on CONFIG_LSM. I'm kind of hoping that you might make a chance to work on this. What are the chances? Thanks, Michaek -- Michael Kerrisk Linux man-pages maintainer; http://www.kernel.org/doc/man-pages/ Linux/UNIX System Programming Training: http://man7.org/training/
