From 7e3dc294a580beb743df43c32495145bb1a04670 Mon Sep 17 00:00:00 2001 From: "Ivan K. Boikov" Date: Sun, 26 Jul 2026 20:51:25 +0200 Subject: SELinux -> AppArmor --- fstab/fstab | 8 ++++---- kernel/kernel/config.d/10-no-selinux.config | 3 +++ kernel/kernel/config.d/10-no-tomoyo.config | 1 + kernel/kernel/config.d/30-apparmor.config | 2 ++ portage/portage/make.profile | 2 +- 5 files changed, 11 insertions(+), 5 deletions(-) create mode 100644 kernel/kernel/config.d/10-no-selinux.config create mode 100644 kernel/kernel/config.d/10-no-tomoyo.config create mode 100644 kernel/kernel/config.d/30-apparmor.config diff --git a/fstab/fstab b/fstab/fstab index 0b8ba2f..6cba965 100644 --- a/fstab/fstab +++ b/fstab/fstab @@ -33,12 +33,12 @@ UUID=f98d6e1a-a1d2-436b-ab1e-dbfa8dcee9fb /var/cache/binpkgs btrfs noatime,com UUID=5ee2653c-67ed-4582-a9ac-2ebbe984bb28 none swap sw 0 0 # /tmp is not mounted as tmpfs automatically by OpenRC -tmpfs /tmp tmpfs rw,nosuid,noatime,nodev,mode=1777,rootcontext=system_u:object_r:tmp_t:s0 0 0 +tmpfs /tmp tmpfs rw,nosuid,noatime,nodev,mode=1777 0 0 # speeding up emerges -tmpfs /var/tmp/portage tmpfs rw,nosuid,noatime,nodev,size=24G,mode=775,uid=portage,gid=portage,rootcontext=system_u:object_r:tmp_t:s0 0 0 -tmpfs /var/chroot/binhost-laptop/var/tmp/portage tmpfs rw,nosuid,noatime,nodev,size=24G,mode=775,uid=portage,gid=portage,rootcontext=system_u:object_r:tmp_t:s0 0 0 +tmpfs /var/tmp/portage tmpfs rw,nosuid,noatime,nodev,size=24G,mode=775,uid=portage,gid=portage 0 0 +tmpfs /var/chroot/binhost-laptop/var/tmp/portage tmpfs rw,nosuid,noatime,nodev,size=24G,mode=775,uid=portage,gid=portage 0 0 -tmpfs /run tmpfs mode=0755,nosuid,nodev,rootcontext=system_u:object_r:var_run_t:s0 0 0 +tmpfs /run tmpfs mode=0755,nosuid,nodev 0 0 UUID=161c7a95-7dbd-4111-9aa0-c5417a92f022 /mnt/tsb_16_0 btrfs nofail,noatime,nodev,nosuid,compress-force=zstd,autodefrag,subvol=@ 0 2 UUID=1c9f0b6a-a8b5-4a7a-959f-821051b35107 /mnt/wdb_04_0 btrfs nofail,noatime,nodev,nosuid,compress-force=zstd,autodefrag,subvol=@ 0 0 diff --git a/kernel/kernel/config.d/10-no-selinux.config b/kernel/kernel/config.d/10-no-selinux.config new file mode 100644 index 0000000..4f7846a --- /dev/null +++ b/kernel/kernel/config.d/10-no-selinux.config @@ -0,0 +1,3 @@ +# CONFIG_SECURITY_SELINUX is not set +# CONFIG_DEFAULT_SECURITY_SELINUX is not set + diff --git a/kernel/kernel/config.d/10-no-tomoyo.config b/kernel/kernel/config.d/10-no-tomoyo.config new file mode 100644 index 0000000..e078519 --- /dev/null +++ b/kernel/kernel/config.d/10-no-tomoyo.config @@ -0,0 +1 @@ +# CONFIG_SECURITY_TOMOYO is not set diff --git a/kernel/kernel/config.d/30-apparmor.config b/kernel/kernel/config.d/30-apparmor.config new file mode 100644 index 0000000..1560b11 --- /dev/null +++ b/kernel/kernel/config.d/30-apparmor.config @@ -0,0 +1,2 @@ +CONFIG_SECURITY_APPARMOR=y +CONFIG_DEFAULT_SECURITY_APPARMOR=y diff --git a/portage/portage/make.profile b/portage/portage/make.profile index eff5795..395fb2c 120000 --- a/portage/portage/make.profile +++ b/portage/portage/make.profile @@ -1 +1 @@ -../../../../var/db/repos/gentoo/profiles/default/linux/amd64/23.0/split-usr/hardened/selinux \ No newline at end of file +../../../../var/db/repos/gentoo/profiles/default/linux/amd64/23.0/split-usr/hardened \ No newline at end of file -- cgit v1.2.3