New subject: [Bug 1205603] bpf lsm enabled but not included in LSM list

21 Nov 2022


      https://bugzilla.suse.com/show_bug.cgi?id=1205603
Bug ID: 1205603
           Summary: bpf lsm enabled but not included in LSM list
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs@opensuse.org
          Reporter: mrueckert@suse.com
        QA Contact: qa-bugs@suse.de
          Found By: ---
           Blocker: ---
During my system upgrades i noticed the following message:
```systemd[1]: bpf-lsm: BPF LSM hook not enabled in the kernel, BPF LSM not
supported```
but we have:
```CONFIG_BPF_LSM=y```
i asked Frank Bui what it checks for. it checks for the string "bpf" in this
list:
```
cat /sys/kernel/security/lsm
lockdown,capability,apparmor
```
it seems ```CONFIG_LSM="integrity,apparmor"``` needs an update.
-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1205603] New: bpf lsm enabled but not included in LSM list