| # |
| # Security configuration |
| # |
| |
| menu "Security options" |
| |
| config SECURITY |
| bool "Enable different security models" |
| help |
| This allows you to choose different security modules to be |
| configured into your kernel. |
| |
| If this option is not selected, the default Linux security |
| model will be used. |
| |
| If you are unsure how to answer this question, answer N. |
| |
| config SECURITY_NETWORK |
| bool "Socket and Networking Security Hooks" |
| depends on SECURITY |
| help |
| This enables the socket and networking security hooks. |
| If enabled, a security module can use these hooks to |
| implement socket and networking access controls. |
| If you are unsure how to answer this question, answer N. |
| |
| config SECURITY_CAPABILITIES |
| tristate "Default Linux Capabilities" |
| depends on SECURITY!=n |
| help |
| This enables the "default" Linux capabilities functionality. |
| If you are unsure how to answer this question, answer Y. |
| |
| config SECURITY_ROOTPLUG |
| tristate "Root Plug Support" |
| depends on USB && SECURITY!=n |
| help |
| This is a sample LSM module that should only be used as such. |
| It prevents any programs running with egid == 0 if a specific |
| USB device is not present in the system. |
| |
| See <http://www.linuxjournal.com/article.php?sid=6279> for |
| more information about this module. |
| |
| If you are unsure how to answer this question, answer N. |
| |
| source security/selinux/Kconfig |
| |
| endmenu |
| |
