dashboard/config: update linux/kasan config

- update to latest linux-next - disable /dev/{mem,kmem,ioport} - enable lockdown (but it's not actually turned on) - enable /dev/device_notify - enable exfat - enable virtio_fs - enable few other things that look reachable in VMs Fixes #1436
google · Oct 15, 2019 · ef4a214 · ef4a214
1 parent 323ca50
commit ef4a214
Show file tree

Hide file tree

Showing 4 changed files with 165 additions and 135 deletions.
diff --git a/dashboard/config/upstream-apparmor.cmdline b/dashboard/config/upstream-apparmor.cmdline
@@ -1,5 +1,5 @@
 security=apparmor
-lsm=yama,safesetid,integrity,tomoyo,apparmor
+lsm=lockdown,yama,safesetid,integrity,tomoyo,apparmor
 ima_policy=tcb
 workqueue.watchdog_thresh=140
 kvm-intel.nested=1