1 # SPDX-License-Identifier: GPL-2.0-only
2 config CIFS
3 tristate "SMB3 and CIFS support (advan
4 depends on INET
5 select NETFS_SUPPORT
6 select NLS
7 select NLS_UCS2_UTILS
8 select CRYPTO
9 select CRYPTO_MD5
10 select CRYPTO_SHA256
11 select CRYPTO_SHA512
12 select CRYPTO_CMAC
13 select CRYPTO_HMAC
14 select CRYPTO_AEAD2
15 select CRYPTO_CCM
16 select CRYPTO_GCM
17 select CRYPTO_ECB
18 select CRYPTO_AES
19 select KEYS
20 select DNS_RESOLVER
21 select ASN1
22 select OID_REGISTRY
23 select NETFS_SUPPORT
24 help
25 This is the client VFS module for th
26 protocols (including the most recent
27 This module also includes support fo
28 SMB2.1, SMB2 and even the old Common
29 protocol. CIFS was the successor to
30 protocol, Server Message Block (SMB
31 mechanism for most early PC operatin
32
33 The SMB3.1.1 protocol is supported b
34 and NAS appliances (e.g. Samba, Wind
35 MacOS) and even in the cloud (e.g. M
36 Linux kernel server, ksmbd. Support
37 included in Windows NT4, 2000 and XP
38 older than SMB2.1 is often discourag
39 This module also provides limited su
40 and similar very old servers.
41
42 This module provides an advanced net
43 mounting to SMB3 (and CIFS) complian
44 for DFS (hierarchical name space), s
45 establishment via Kerberos or NTLMv2
46 security features, per-share encrypt
47 directory leases, safe distributed c
48 Unicode and other internationalizati
49
50 In general, the default dialects, SM
51 performance, security and features,
52
53 If you need to mount to Samba, Azure
54 machine, say Y.
55
56 config CIFS_STATS2
57 bool "Extended statistics"
58 depends on CIFS
59 default y
60 help
61 Enabling this option will allow more
62 request timing to be displayed in /p
63 allow optional logging of slow respo
64 value of /proc/fs/cifs/cifsFYI). See
65 for more details. These additional s
66 on performance and memory utilizatio
67
68 If unsure, say Y.
69
70 config CIFS_ALLOW_INSECURE_LEGACY
71 bool "Support legacy servers which use
72 depends on CIFS
73 default y
74 help
75 Modern dialects, SMB2.1 and later (i
76 additional security features, includ
77 man-in-the-middle attacks and strong
78 of legacy dialects (SMB1/CIFS and SM
79
80 Disabling this option prevents users
81 on mounts with cifs.ko
82
83 If unsure, say Y.
84
85 config CIFS_UPCALL
86 bool "Kerberos/SPNEGO advanced session
87 depends on CIFS
88 help
89 Enables an upcall mechanism for CIFS
90 utilities to provide SPNEGO packaged
91 which are needed to mount to certain
92 secure Kerberos authentication is re
93
94 config CIFS_XATTR
95 bool "CIFS extended attributes"
96 depends on CIFS
97 help
98 Extended attributes are name:value p
99 the kernel or by users (see the attr
100 CIFS maps the name of extended attri
101 namespace prefix to SMB/CIFS EAs. E
102 servers without the user namespace p
103 seen by Linux cifs clients prefaced
104 The system namespace (used by some f
105 not supported at this time.
106
107 If unsure, say Y.
108
109 config CIFS_POSIX
110 bool "CIFS POSIX Extensions"
111 depends on CIFS && CIFS_ALLOW_INSECURE
112 help
113 Enabling this option will cause the
114 negotiate a feature of the older cif
115 Samba 3.0.5 or later, that optionall
116 (rather than Windows like) file beha
117 for POSIX ACLs (getfacl and setfacl)
118 and later) which can negotiate CIFS
119 option is not needed when mounting w
120
121 config CIFS_DEBUG
122 bool "Enable CIFS debugging routines"
123 default y
124 depends on CIFS
125 help
126 Enabling this option adds helpful de
127 the cifs code which increases the si
128 If unsure, say Y.
129
130 config CIFS_DEBUG2
131 bool "Enable additional CIFS debugging
132 depends on CIFS_DEBUG
133 help
134 Enabling this option adds a few more
135 to the cifs code which slightly incr
136 the cifs module and can cause additi
137 messages in some error paths, slowin
138 option can be turned off unless you
139 cifs problems. If unsure, say N.
140
141 config CIFS_DEBUG_DUMP_KEYS
142 bool "Dump encryption keys for offline
143 depends on CIFS_DEBUG
144 help
145 Enabling this will dump the encrypti
146 used to communicate on an encrypted
147 console. This allows Wireshark to de
148 encrypted network captures. Enable t
149 If unsure, say N.
150
151 config CIFS_DFS_UPCALL
152 bool "DFS feature support"
153 depends on CIFS
154 help
155 Distributed File System (DFS) suppor
156 transparently in an enterprise name
157 moves to a different server. This f
158 an upcall mechanism for CIFS which c
159 utilities to provide server name res
160 IP addresses) which is needed in ord
161 servers if their addresses change or
162 DFS junction points. If unsure, say
163
164 config CIFS_SWN_UPCALL
165 bool "SWN feature support"
166 depends on CIFS
167 help
168 The Service Witness Protocol (SWN) i
169 from a highly available server of re
170 feature enables an upcall mechanism
171 userspace daemon to establish the DC
172 the cluster available interfaces and
173 If unsure, say Y.
174
175 config CIFS_NFSD_EXPORT
176 bool "Allow nfsd to export CIFS file s
177 depends on CIFS && BROKEN
178 help
179 Allows NFS server to export a CIFS m
180
181 if CIFS
182
183 config CIFS_SMB_DIRECT
184 bool "SMB Direct support"
185 depends on CIFS=m && INFINIBAND && INF
186 help
187 Enables SMB Direct support for SMB 3
188 SMB Direct allows transferring SMB p
189 say Y.
190
191 config CIFS_FSCACHE
192 bool "Provide CIFS client caching supp
193 depends on CIFS=m && FSCACHE || CIFS=y
194 help
195 Makes CIFS FS-Cache capable. Say Y h
196 to be cached locally on disk through
197 manager. If unsure, say N.
198
199 config CIFS_ROOT
200 bool "SMB root file system (Experiment
201 depends on CIFS=y && IP_PNP
202 help
203 Enables root file system support ove
204
205 Most people say N here.
206
207 config CIFS_COMPRESSION
208 bool "SMB message compression (Experim
209 depends on CIFS
210 default n
211 help
212 Enables over-the-wire message compre
213 mounts when negotiated with the serv
214
215 Only write requests with data size >
216 compressed to avoid wasting resource
217
218 Say Y here if you want SMB traffic t
219 If unsure, say N.
220
221 endif
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.