diff options
| author | Todd Frederick <tfred@google.com> | 2021-11-15 21:11:52 +0000 |
|---|---|---|
| committer | Todd Frederick <tfred@google.com> | 2021-11-17 02:40:05 +0000 |
| commit | ef7bae3c771b93200b0852d65bd1159689c573d3 (patch) | |
| tree | 00d1c6e199bbb857160210ab8430c1b8929cfb77 | |
| parent | a2eac94e9e53c3f69444879399d83df4e1242a19 (diff) | |
| download | config-ef7bae3c771b93200b0852d65bd1159689c573d3.tar.gz | |
Add empty static user-mode helper path
To pass CtsSecurityHostTestCases, the static user-mode helper must be
enabled, and it must be set to an approved path. The default path,
/sbin/usermode-helper, is not approved and does not exist on this
platform. A blank string disables user-mode helpers entirely when static
user-mode helper support is enabled, which is also acceptable.
Bug: 204310674
Test: Verified that testConfigDisableUsermodehelper passes
Change-Id: Id79c7be962dfd4edb02eae4b9a8633283463016a
| -rw-r--r-- | r11_defconfig | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/r11_defconfig b/r11_defconfig index 3b495e1..79f6bcc 100644 --- a/r11_defconfig +++ b/r11_defconfig @@ -484,6 +484,7 @@ CONFIG_SECURITY=y CONFIG_SECURITY_NETWORK=y CONFIG_HARDENED_USERCOPY=y CONFIG_STATIC_USERMODEHELPER=y +CONFIG_STATIC_USERMODEHELPER_PATH="" CONFIG_SECURITY_SELINUX=y # CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set CONFIG_CRYPTO_GCM=y |