[PATCH] hornet: depend on CONFIG_SECURITY and CONFIG_BPF_SYSCALL

Paul Moore paul at paul-moore.com
Thu May 14 16:57:22 UTC 2026


On Thu, May 14, 2026 at 11:20 AM Blaise Boscaccy
<bboscaccy at linux.microsoft.com> wrote:
> Paul Moore <paul at paul-moore.com> writes:
> > Hornet only makes sense as a LSM if the LSM framework is enabled
> > via CONFIG_SECURITY and eBPF is enabled via CONFIG_BPF_SYSCALL.
> >
> > Reported-by: kernel test robot <lkp at intel.com>
> > Closes: https://lore.kernel.org/oe-kbuild-all/202605140655.YX9jzufG-lkp@intel.com/
> > Signed-off-by: Paul Moore <paul at paul-moore.com>
> > ---
> >  security/hornet/Kconfig | 1 +
> >  1 file changed, 1 insertion(+)
> >
> > diff --git a/security/hornet/Kconfig b/security/hornet/Kconfig
> > index 5be71d97daee..537ad015958c 100644
> > --- a/security/hornet/Kconfig
> > +++ b/security/hornet/Kconfig
> > @@ -1,6 +1,7 @@
> >  # SPDX-License-Identifier: GPL-2.0-only
> >  config SECURITY_HORNET
> >       bool "Hornet support"
> > +     depends on SECURITY && BPF_SYSCALL
> >       select CRYPTO_LIB_SHA256
> >       select PKCS7_MESSAGE_PARSER
> >       select SYSTEM_DATA_VERIFICATION
> > --
> > 2.54.0
>
> Acked-by: Blaise Boscaccy <bboscaccy at linux.microsoft.com>

Merged into lsm/dev.

-- 
paul-moore.com



More information about the Linux-security-module-archive mailing list