tree 70b259c9a023b389267064690131597ab2386ecd
parent ea0a2c862d41544cf58807b17daf6b3b4dfa12bc
author Lorenz Brun <lorenz@monogon.tech> 1657722302 +0000
committer Lorenz Brun <lorenz@monogon.tech> 1657789279 +0000

t/linux: enable LoadPin LSM

The LoadPin LSM ensures that the kernel only loads files for its own use
(like firmware, modules, ...) from the root file system. This helps
prevent attacks which overlay directories with mount points.

Change-Id: Id7f8da0e6030e2a6d19fc25840063e6af56c389c
Reviewed-on: https://review.monogon.dev/c/monogon/+/835
Tested-by: Jenkins CI
Reviewed-by: Leopold Schabel <leo@monogon.tech>