used on the command line, and report that it is happening.
> used on the command line, and report that it is happening.
This is a little awkward. How about "lsm= supersedes security=".
> > used on the command line, and report that it is happening.
> This is a little awkward. How about "lsm= supersedes security=".
Fine by me. James? What would you like here?
> > > used on the command line, and report that it is happening.
> > This is a little awkward. How about "lsm= supersedes security=".
> Fine by me. James? What would you like here?
How about security= is ignored because it is superseded by lsm= ?
To maintain the existing behavior of CONFIG_DEFAULT_SECURITY, I also suggest this change.
security=apparmor when they don't want to enable other LSM_FLAG_LEGACY_MAJOR modules.
If unsure, leave this as the default.
+	prompt "Default exclusive security module"
+	  neither the "security=" parameter nor the "lsm=" parameter is specified.
+		bool "Unix Discretionary Access Controls"
> To maintain the existing behavior of CONFIG_DEFAULT_SECURITY, I also suggest this change.
> security=apparmor when they don't want to enable other LSM_FLAG_LEGACY_MAJOR modules.
I don't understand the use-case you're concerned about?
>           If unsure, leave this as the default.
> +       prompt "Default exclusive security module"
> +         neither the "security=" parameter nor the "lsm=" parameter is specified.
> +               bool "Unix Discretionary Access Controls"
> > To maintain the existing behavior of CONFIG_DEFAULT_SECURITY, I also suggest this change.
> > security=apparmor when they don't want to enable other LSM_FLAG_LEGACY_MAJOR modules.
> I don't understand the use-case you're concerned about?
The purpose of lsm= remains.
suddenly find TOMOYO messages because TOMOYO is no longer exclusive.
> > > > used on the command line, and report that it is happening.
> > > To maintain the existing behavior of CONFIG_DEFAULT_SECURITY, I also suggest this change.
> > > security=apparmor when they don't want to enable other LSM_FLAG_LEGACY_MAJOR modules.
> > I don't understand the use-case you're concerned about?
> The purpose of lsm= remains.
> suddenly find TOMOYO messages because TOMOYO is no longer exclusive.
situation and needlessly drags out the transition for no real gain.
(including TOMOYO) will be disabled, which matches the old behavior.