configs: Enable some SELinux options
authorMark Brown <broonie@linaro.org>
Tue, 17 Jun 2014 11:39:05 +0000 (12:39 +0100)
committerMark Brown <broonie@linaro.org>
Tue, 17 Jun 2014 11:39:05 +0000 (12:39 +0100)
Going forward Android will require SELinux and we may as well make sure
it does't get in the way for other configurations.

Signed-off-by: Mark Brown <broonie@linaro.org>
linaro/configs/linaro-base.conf

index fa38b9e44367373ce210051b8df27a8a2ec20b9f..1cdf0ba23e240a93f965dd3dd11424ea6cc88551 100644 (file)
@@ -103,3 +103,13 @@ CONFIG_FTRACE_SYSCALLS=y
 CONFIG_STACK_TRACER=y
 CONFIG_FUNCTION_PROFILER=y
 CONFIG_MAILBOX=y
+CONFIG_AUDIT=y
+CONFIG_NF_CONNTRACK_SECMARK=y
+CONFIG_NETFILTER_XT_TARGET_CONNSECMARK=y
+CONFIG_NETFILTER_XT_TARGET_SECMARK=y
+CONFIG_IP_NF_SECURITY=y
+CONFIG_SECURITY=y
+CONFIG_SECURITY_NETWORK=y
+CONFIG_LSM_MMAP_MIN_ADDR=4096
+CONFIG_SECURITY_SELINUX=y
+CONFIG_EXT4_FS_SECURITY=y