diff options
Diffstat (limited to 'debian/patches/debian/yama-disable-by-default.patch')
-rw-r--r-- | debian/patches/debian/yama-disable-by-default.patch | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/debian/patches/debian/yama-disable-by-default.patch b/debian/patches/debian/yama-disable-by-default.patch index c33ac0c9d..3458714a2 100644 --- a/debian/patches/debian/yama-disable-by-default.patch +++ b/debian/patches/debian/yama-disable-by-default.patch @@ -12,7 +12,7 @@ diff --git a/security/yama/yama_lsm.c b/security/yama/yama_lsm.c index efac68556b45..95ff3e778a17 100644 --- a/security/yama/yama_lsm.c +++ b/security/yama/yama_lsm.c -@@ -28,7 +28,7 @@ +@@ -25,7 +25,7 @@ #define YAMA_SCOPE_CAPABILITY 2 #define YAMA_SCOPE_NO_ATTACH 3 @@ -21,12 +21,12 @@ index efac68556b45..95ff3e778a17 100644 /* describe a ptrace relationship for potential exception */ struct ptrace_relation { -@@ -481,7 +481,7 @@ static inline void yama_init_sysctl(void) { } +@@ -476,7 +476,7 @@ static inline void yama_init_sysctl(void) { } static int __init yama_init(void) { - pr_info("Yama: becoming mindful.\n"); + pr_info("Yama: disabled by default; enable with sysctl kernel.yama.*\n"); - security_add_hooks(yama_hooks, ARRAY_SIZE(yama_hooks), "yama"); + security_add_hooks(yama_hooks, ARRAY_SIZE(yama_hooks), &yama_lsmid); yama_init_sysctl(); return 0; |