CONFIG_SECURITY_APPARMOR_PARANOID_LOAD: Perform full verification of loaded policy

General informations

The Linux kernel configuration item CONFIG_SECURITY_APPARMOR_PARANOID_LOAD:

• prompt: Perform full verification of loaded policy
• type: bool
• depends on: CONFIG_SECURITY_APPARMOR
• defined in security/apparmor/Kconfig
• found in Linux kernels: 6.0–6.8, 6.9-rc+HEAD

Help text

This options allows controlling whether apparmor does a full verification of loaded policy. This should not be disabled except for embedded systems where the image is read only, includes policy, and has some form of integrity check. Disabling the check will speed up policy loads.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: