Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 5915eb53 authored by Miklos Szeredi's avatar Miklos Szeredi Committed by James Morris
Browse files

security: remove dummy module 



Remove the dummy module and make the "capability" module the default.

Compile and boot tested.

Signed-off-by: default avatarMiklos Szeredi <mszeredi@suse.cz>
Acked-by: default avatarSerge Hallyn <serue@us.ibm.com>
Signed-off-by: default avatarJames Morris <jmorris@namei.org>
parent b478a9f9

security/Kconfig

+1 −9
Original line number Diff line number Diff line
@@ -73,17 +73,9 @@ config SECURITY_NETWORK_XFRM 
	  IPSec.

	  If you are unsure how to answer this question, answer N.



config SECURITY_CAPABILITIES

	bool "Default Linux Capabilities"

	depends on SECURITY

	default y

	help

	  This enables the "default" Linux capabilities functionality.

	  If you are unsure how to answer this question, answer Y.



config SECURITY_FILE_CAPABILITIES

	bool "File POSIX Capabilities (EXPERIMENTAL)"

	depends on (SECURITY=n || SECURITY_CAPABILITIES!=n) && EXPERIMENTAL

	depends on SECURITY && EXPERIMENTAL

	default n

	help

	  This enables filesystem capabilities, allowing you to give

security/Makefile

+4 −7
Original line number Diff line number Diff line
@@ -6,16 +6,13 @@ obj-$(CONFIG_KEYS) += keys/ 
subdir-$(CONFIG_SECURITY_SELINUX)	+= selinux

subdir-$(CONFIG_SECURITY_SMACK)		+= smack



# if we don't select a security model, use the default capabilities

ifneq ($(CONFIG_SECURITY),y)

# always enable default capabilities

obj-y		+= commoncap.o

endif



# Object file lists

obj-$(CONFIG_SECURITY)			+= security.o dummy.o inode.o

obj-$(CONFIG_SECURITY)			+= security.o capability.o inode.o

# Must precede capability.o in order to stack properly.

obj-$(CONFIG_SECURITY_SELINUX)		+= selinux/built-in.o

obj-$(CONFIG_SECURITY_SMACK)		+= commoncap.o smack/built-in.o

obj-$(CONFIG_SECURITY_CAPABILITIES)	+= commoncap.o capability.o

obj-$(CONFIG_SECURITY_ROOTPLUG)		+= commoncap.o root_plug.o

obj-$(CONFIG_SECURITY_SMACK)		+= smack/built-in.o

obj-$(CONFIG_SECURITY_ROOTPLUG)		+= root_plug.o

obj-$(CONFIG_CGROUP_DEVICE)		+= device_cgroup.o