tree 3c30684e605efa39d85d69b88ae4af3df7ce6d9c
parent a6926cc989eb8e3349ae9b858177608e86f7257c
author Kees Cook <keescook@chromium.org> 1463474752 -0700
committer James Morris <james.l.morris@oracle.com> 1463479830 +1000

LSM: LoadPin: provide enablement CONFIG

Instead of being enabled by default when SECURITY_LOADPIN is selected,
provide an additional (default off) config to determine the boot time
behavior. As before, the "loadpin.enabled=0/1" kernel parameter remains
available.

Suggested-by: James Morris <jmorris@namei.org>
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.l.morris@oracle.com>