mirror of
https://github.com/aljazceru/kata-containers.git
synced 2026-02-15 03:24:30 +01:00
a9c746f284
Add kernel configs related to SELinux in order to add the support for containers running inside the guest. Fixes: #4812 Signed-off-by: Manabu Sugimoto <Manabu.Sugimoto@sony.com>
13 lines
368 B
Plaintext
13 lines
368 B
Plaintext
# SELinux support:
|
|
CONFIG_AUDIT=y
|
|
CONFIG_AUDITSYSCALL=y
|
|
CONFIG_LSM_MMAP_MIN_ADDR=6553
|
|
CONFIG_NETWORK_SECMARK=y
|
|
CONFIG_SECURITY_NETWORK=y
|
|
CONFIG_SECURITY_SELINUX=y
|
|
CONFIG_SECURITY_SELINUX_BOOTPARAM=y
|
|
CONFIG_SECURITY_SELINUX_DEVELOP=y
|
|
CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=0
|
|
CONFIG_SECURITY_SELINUX_SIDTAB_HASH_BITS=9
|
|
CONFIG_SECURITY_SELINUX_SID2STR_CACHE_SIZE=256
|