commit bcf7a4add5b7337c5f3ad8be2c9a5559c99ce1b9
author Roger Liao <rogerliao@google.com> Wed Sep 22 11:02:40 2021 +0800
committer Roger Liao <rogerliao@google.com> Mon Nov 01 08:07:08 2021 +0000
tree 41f85a4189431a46b4f6eab9912b8a22be1788a8
parent bd82ad82242c3aab965a4a1d628c313b738857a0

arm64: configs: Disable CONFIG_SECURITY_SMACK

Security hardening:
1. unset CONFIG_SECURITY_SMACK which implicitly enable CONFIG_NETLABEL
2. set CONFIG_SECURITY_NETWORK which CONFIG_SECURITY_SELINUX depends on

Bug: 198690429

Signed-off-by: Roger Liao <rogerliao@google.com>
Change-Id: Ib259713644bbd3cba43ef44edf8fc34fe11bbac3

arch/arm64/configs/redbull_defconfig

diff --git a/arch/arm64/configs/redbull_defconfig b/arch/arm64/configs/redbull_defconfig
index 6ff85b4..a69c685 100644
--- a/arch/arm64/configs/redbull_defconfig
+++ b/arch/arm64/configs/redbull_defconfig
@@ -668,13 +668,13 @@
 CONFIG_NLS_ISO8859_1=y
 CONFIG_UNICODE=y
 CONFIG_SECURITY=y
+CONFIG_SECURITY_NETWORK=y
 CONFIG_HARDENED_USERCOPY=y
 CONFIG_HARDENED_USERCOPY_PAGESPAN=y
 CONFIG_FORTIFY_SOURCE=y
 CONFIG_STATIC_USERMODEHELPER=y
 CONFIG_STATIC_USERMODEHELPER_PATH=""
 CONFIG_SECURITY_SELINUX=y
-CONFIG_SECURITY_SMACK=y
 CONFIG_INIT_STACK_ALL_ZERO=y
 CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
 CONFIG_CRYPTO_NIAP_FPT_TST_EXT_11=y