Re: [PATCH] security: CONFIG_LSM: LSM can depend on SECURITY

[Paul Moore]

On Aug 24, 2025 Randy Dunlap <rdunlap@xxxxxxxxxxxxx> wrote:
> 
> When CONFIG_SECURITY is not set, CONFIG_LSM (builtin_lsm_order) does
> not need to be visible and settable since builtin_lsm_order is defined in
> security.o, which is only built when CONFIG_SECURITY=y.
> 
> So make CONFIG_LSM depend on CONFIG_SECURITY.
> 
> Fixes: 13e735c0e953 ("LSM: Introduce CONFIG_LSM")
> Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
> ---
> Cc: Kees Cook <kees@xxxxxxxxxx>
> Cc: Paul Moore <paul@xxxxxxxxxxxxxx>
> Cc: James Morris <jmorris@xxxxxxxxx>
> Cc: "Serge E. Hallyn" <serge@xxxxxxxxxx>
> Cc: linux-security-module@xxxxxxxxxxxxxxx
> 
>  security/Kconfig |    1 +
>  1 file changed, 1 insertion(+)

Merged into lsm/dev, thanks!

--
paul-moore.com