tree 0d513b84ad992660d85501b216a4f1cd59e90195
parent 5298d0b9b98089f5af406f7e05a41a53f9a15c11
author Stephen Smalley <sds@tycho.nsa.gov> 1575996941 -0500
committer Paul Moore <paul@paul-moore.com> 1576003902 -0500

security: only build lsm_audit if CONFIG_SECURITY=y

The lsm_audit code is only required when CONFIG_SECURITY is enabled.
It does not have a build dependency on CONFIG_AUDIT since audit.h
provides trivial static inlines for audit_log*() when CONFIG_AUDIT
is disabled.  Hence, the Makefile should only add lsm_audit to the
obj lists based on CONFIG_SECURITY, not CONFIG_AUDIT.

Fixes: 59438b46471a ("security,lockdown,selinux: implement SELinux lockdown")
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>