[PATCH] Docs/security: update cmdline keyword usage
Randy Dunlap
rdunlap at infradead.org
Tue Jan 14 23:16:52 UTC 2025
On 1/14/25 2:59 PM, Tetsuo Handa wrote:
> On 2025/01/15 7:51, Randy Dunlap wrote:
>> Use "lsm=name,..." instead "security=name,..." since the latter is
>> deprecated.
>
> Sorry, but security= is for specifying only one of exclusive LSM modules
> whereas lsm= is for specifying both one of exclusive LSM modules and
> all of non-exclusive LSM modules. That is, you can't deprecate
> security= using s/security=/lsm=/g .
>
OK, thanks for the feedback.
I am still confused by this part though, in Documentation/doc-guide/kernel-parameters.txt:
security= [SECURITY] Choose a legacy "major" security module to
enable at boot. This has been deprecated by the
"lsm=" parameter.
--
~Randy
More information about the Linux-security-module-archive
mailing list