From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx> Required for inet_socket/tcp checks. Signed-off-by: Christian Göttsche <cgzones@xxxxxxxxxxxxxx> --- defconfig | 1 + 1 file changed, 1 insertion(+) diff --git a/defconfig b/defconfig index b2d4a90..b86a1dc 100644 --- a/defconfig +++ b/defconfig @@ -10,6 +10,7 @@ CONFIG_SECURITY_SELINUX=y # For testing of labeled IPSEC, NetLabel, and SECMARK functionality. # Not strictly required for basic SELinux operation. CONFIG_SECURITY_NETWORK_XFRM=y +CONFIG_XFRM_USER=y CONFIG_NETLABEL=y CONFIG_IP_NF_SECURITY=m CONFIG_INET_XFRM_MODE_TRANSPORT=m -- 2.47.1