From f4bf2c8d6125a8d813360fded27b53b641515285 Mon Sep 17 00:00:00 2001
From: Jan Alexander Steffens <heftig@archlinux.org>
Date: Mon, 6 Apr 2020 22:36:28 +0000
Subject: [PATCH] Put lockdown LSM into default initialization list

---
 PKGBUILD | 2 +-
 config   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/PKGBUILD b/PKGBUILD
index e15b09b..6e18122 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -25,7 +25,7 @@ validpgpkeys=(
   '8218F88849AAC522E94CF470A5E9288C4FA415FA'  # Jan Alexander Steffens (heftig)
 )
 sha256sums=('SKIP'
-            '5c809f7ca4f21ebd95368533b20c0ed78fe2e006762dff742e5fd0751521ad11')
+            'e78bfa9f5a1065d93396a37d59043bd79805f4681df27ef44dcddea8de092818')
 
 export KBUILD_BUILD_HOST=archlinux
 export KBUILD_BUILD_USER=$pkgbase
diff --git a/config b/config
index c6852f9..ebb5cdc 100644
--- a/config
+++ b/config
@@ -10021,7 +10021,7 @@ CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
 # CONFIG_DEFAULT_SECURITY_TOMOYO is not set
 # CONFIG_DEFAULT_SECURITY_APPARMOR is not set
 CONFIG_DEFAULT_SECURITY_DAC=y
-CONFIG_LSM="yama"
+CONFIG_LSM="lockdown,yama"
 
 #
 # Kernel hardening options