| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152 |
- config EVM
- boolean "EVM support"
- depends on SECURITY
- select KEYS
- select ENCRYPTED_KEYS
- select CRYPTO_HMAC
- select CRYPTO_SHA1
- default n
- help
- EVM protects a file's security extended attributes against
- integrity attacks.
- If you are unsure how to answer this question, answer N.
- if EVM
- menu "EVM options"
- config EVM_ATTR_FSUUID
- bool "FSUUID (version 2)"
- default y
- depends on EVM
- help
- Include filesystem UUID for HMAC calculation.
- Default value is 'selected', which is former version 2.
- if 'not selected', it is former version 1
- WARNING: changing the HMAC calculation method or adding
- additional info to the calculation, requires existing EVM
- labeled file systems to be relabeled.
- config EVM_EXTRA_SMACK_XATTRS
- bool "Additional SMACK xattrs"
- depends on EVM && SECURITY_SMACK
- default n
- help
- Include additional SMACK xattrs for HMAC calculation.
- In addition to the original security xattrs (eg. security.selinux,
- security.SMACK64, security.capability, and security.ima) included
- in the HMAC calculation, enabling this option includes newly defined
- Smack xattrs: security.SMACK64EXEC, security.SMACK64TRANSMUTE and
- security.SMACK64MMAP.
- WARNING: changing the HMAC calculation method or adding
- additional info to the calculation, requires existing EVM
- labeled file systems to be relabeled.
- endmenu
- endif
|
