Commit 8d1d1e8d authored Jan 30, 2025 by Ilya Leoshkevich Committed by Vasily Gorbik Feb 11, 2025

s390/configs: Remove CONFIG_LSM



s390 defconfig does not have BPF LSM, resulting in

    systemd[1]: bpf-restrict-fs: BPF LSM hook not enabled in the kernel, BPF LSM not supported.

with the respective kernels. The other architectures do not explicitly
set it, and the default values have BPF in them, so just drop it.

Reported-by: Marc Hartmayer <mhartmay@linux.ibm.com>
Acked-by: Vasily Gorbik <gor@linux.ibm.com>
Signed-off-by: Ilya Leoshkevich <iii@linux.ibm.com>
Signed-off-by: Vasily Gorbik <gor@linux.ibm.com>

parent a64dcfb4

arch/s390/configs/debug_defconfig

+0 −1

Original line number	Diff line number	Diff line
		@@ -740,7 +740,6 @@ CONFIG_IMA=y
		CONFIG_IMA_DEFAULT_HASH_SHA256=y
		CONFIG_IMA_WRITE_POLICY=y
		CONFIG_IMA_APPRAISE=y
		CONFIG_LSM="yama,loadpin,safesetid,integrity,selinux,smack,tomoyo,apparmor"
		CONFIG_BUG_ON_DATA_CORRUPTION=y
		CONFIG_CRYPTO_USER=m
		# CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set

arch/s390/configs/defconfig

+0 −1

Original line number	Diff line number	Diff line
		@@ -725,7 +725,6 @@ CONFIG_IMA=y
		CONFIG_IMA_DEFAULT_HASH_SHA256=y
		CONFIG_IMA_WRITE_POLICY=y
		CONFIG_IMA_APPRAISE=y
		CONFIG_LSM="yama,loadpin,safesetid,integrity,selinux,smack,tomoyo,apparmor"
		CONFIG_BUG_ON_DATA_CORRUPTION=y
		CONFIG_CRYPTO_FIPS=y
		CONFIG_CRYPTO_USER=m

arch/s390/configs/zfcpdump_defconfig

+0 −1

Original line number	Diff line number	Diff line
		@@ -62,7 +62,6 @@ CONFIG_ZFCP=y
		# CONFIG_INOTIFY_USER is not set
		# CONFIG_MISC_FILESYSTEMS is not set
		# CONFIG_NETWORK_FILESYSTEMS is not set
		CONFIG_LSM="yama,loadpin,safesetid,integrity"
		# CONFIG_ZLIB_DFLTCC is not set
		CONFIG_XZ_DEC_MICROLZMA=y
		CONFIG_PRINTK_TIME=y