Enable policy hash introspection by default
configname: CONFIG_SECURITY_APPARMOR_HASH_DEFAULT
Linux Kernel Configuration
└─>Security options
└─>Enable policy hash introspection by default
In linux kernel since version 3.10 (release Date: 2013-06-30)
This option selects whether sha256 hashing of loaded policy
is enabled by default. The generation of sha256 hashes for
loaded policy provide system administrators a quick way to
verify that policy in the kernel matches what is expected,
however it can slow down policy load on some devices. In
these cases policy hashing can be disabled by default and
enabled only if needed.
is enabled by default. The generation of sha256 hashes for
loaded policy provide system administrators a quick way to
verify that policy in the kernel matches what is expected,
however it can slow down policy load on some devices. In
these cases policy hashing can be disabled by default and
enabled only if needed.