LSM: LoadPin: provide enablement CONFIG
authorKees Cook <keescook@chromium.org>
Tue, 17 May 2016 08:45:52 +0000 (01:45 -0700)
committerJames Morris <james.l.morris@oracle.com>
Tue, 17 May 2016 10:10:30 +0000 (20:10 +1000)
commitb937190c40de0f6f07f592042e3097b16c6b0130
tree3c30684e605efa39d85d69b88ae4af3df7ce6d9c
parenta6926cc989eb8e3349ae9b858177608e86f7257c
LSM: LoadPin: provide enablement CONFIG

Instead of being enabled by default when SECURITY_LOADPIN is selected,
provide an additional (default off) config to determine the boot time
behavior. As before, the "loadpin.enabled=0/1" kernel parameter remains
available.

Suggested-by: James Morris <jmorris@namei.org>
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.l.morris@oracle.com>
security/loadpin/Kconfig
security/loadpin/loadpin.c