[PATCH] Docs/security: update cmdline keyword usage

Randy Dunlap rdunlap at infradead.org
Tue Jan 14 23:16:52 UTC 2025



On 1/14/25 2:59 PM, Tetsuo Handa wrote:
> On 2025/01/15 7:51, Randy Dunlap wrote:
>> Use "lsm=name,..." instead "security=name,..." since the latter is
>> deprecated.
> 
> Sorry, but security= is for specifying only one of exclusive LSM modules
> whereas lsm= is for specifying both one of exclusive LSM modules and
> all of non-exclusive LSM modules. That is, you can't deprecate
> security= using s/security=/lsm=/g .
> 

OK, thanks for the feedback.

I am still confused by this part though, in Documentation/doc-guide/kernel-parameters.txt:

	security=	[SECURITY] Choose a legacy "major" security module to
			enable at boot. This has been deprecated by the
			"lsm=" parameter.

-- 
~Randy




More information about the Linux-security-module-archive mailing list