1 # SPDX-License-Identifier: GPL-2.0-only <<
2 config SUNRPC 1 config SUNRPC
3 tristate 2 tristate
4 depends on MULTIUSER <<
5 3
6 config SUNRPC_GSS 4 config SUNRPC_GSS
7 tristate 5 tristate
8 select OID_REGISTRY <<
9 depends on MULTIUSER <<
10 6
11 config SUNRPC_BACKCHANNEL !! 7 config SUNRPC_XPRT_RDMA
12 bool !! 8 tristate
13 depends on SUNRPC !! 9 depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS && EXPERIMENTAL
14 !! 10 default SUNRPC && INFINIBAND
15 config SUNRPC_SWAP !! 11 help
16 bool !! 12 This option allows the NFS client and server to support
17 depends on SUNRPC !! 13 an RDMA-enabled transport.
>> 14
>> 15 To compile RPC client RDMA transport support as a module,
>> 16 choose M here: the module will be called xprtrdma.
>> 17
>> 18 If unsure, say N.
18 19
19 config RPCSEC_GSS_KRB5 20 config RPCSEC_GSS_KRB5
20 tristate "Secure RPC: Kerberos V mecha !! 21 tristate "Secure RPC: Kerberos V mechanism (EXPERIMENTAL)"
21 depends on SUNRPC && CRYPTO !! 22 depends on SUNRPC && EXPERIMENTAL
22 default y <<
23 select SUNRPC_GSS 23 select SUNRPC_GSS
24 select CRYPTO_SKCIPHER !! 24 select CRYPTO
25 select CRYPTO_HASH !! 25 select CRYPTO_MD5
>> 26 select CRYPTO_DES
>> 27 select CRYPTO_CBC
26 help 28 help
27 Choose Y here to enable Secure RPC u 29 Choose Y here to enable Secure RPC using the Kerberos version 5
28 GSS-API mechanism (RFC 1964). 30 GSS-API mechanism (RFC 1964).
29 31
30 Secure RPC calls with Kerberos requi 32 Secure RPC calls with Kerberos require an auxiliary user-space
31 daemon which may be found in the Lin 33 daemon which may be found in the Linux nfs-utils package
32 available from http://linux-nfs.org/ 34 available from http://linux-nfs.org/. In addition, user-space
33 Kerberos support should be installed 35 Kerberos support should be installed.
34 36
35 If unsure, say Y. !! 37 If unsure, say N.
36 38
37 config RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1 !! 39 config RPCSEC_GSS_SPKM3
38 bool "Enable Kerberos enctypes based o !! 40 tristate "Secure RPC: SPKM3 mechanism (EXPERIMENTAL)"
39 depends on RPCSEC_GSS_KRB5 !! 41 depends on SUNRPC && EXPERIMENTAL
40 depends on CRYPTO_CBC && CRYPTO_CTS !! 42 select SUNRPC_GSS
41 depends on CRYPTO_HMAC && CRYPTO_SHA1 !! 43 select CRYPTO
42 depends on CRYPTO_AES !! 44 select CRYPTO_MD5
43 default y !! 45 select CRYPTO_DES
44 help !! 46 select CRYPTO_CAST5
45 Choose Y to enable the use of Kerber !! 47 select CRYPTO_CBC
46 that utilize Advanced Encryption Sta <<
47 SHA-1 digests. These include aes128- <<
48 aes256-cts-hmac-sha1-96. <<
49 <<
50 config RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA <<
51 bool "Enable Kerberos encryption types <<
52 depends on RPCSEC_GSS_KRB5 <<
53 depends on CRYPTO_CBC && CRYPTO_CTS && <<
54 depends on CRYPTO_CMAC <<
55 default n <<
56 help <<
57 Choose Y to enable the use of Kerber <<
58 that utilize Camellia ciphers (RFC 3 <<
59 (NIST Special Publication 800-38B). <<
60 camellia128-cts-cmac and camellia256 <<
61 <<
62 config RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2 <<
63 bool "Enable Kerberos enctypes based o <<
64 depends on RPCSEC_GSS_KRB5 <<
65 depends on CRYPTO_CBC && CRYPTO_CTS <<
66 depends on CRYPTO_HMAC && CRYPTO_SHA25 <<
67 depends on CRYPTO_AES <<
68 default n <<
69 help <<
70 Choose Y to enable the use of Kerber <<
71 that utilize Advanced Encryption Sta <<
72 SHA-2 digests. These include aes128- <<
73 aes256-cts-hmac-sha384-192. <<
74 <<
75 config RPCSEC_GSS_KRB5_KUNIT_TEST <<
76 tristate "KUnit tests for RPCSEC GSS K <<
77 depends on RPCSEC_GSS_KRB5 && KUNIT <<
78 default KUNIT_ALL_TESTS <<
79 help <<
80 This builds the KUnit tests for RPCS <<
81 <<
82 KUnit tests run during boot and outp <<
83 log in TAP format (https://testanyth <<
84 kernel devs running KUnit test harne <<
85 into a production build. <<
86 <<
87 For more information on KUnit and un <<
88 to the KUnit documentation in Docume <<
89 <<
90 config SUNRPC_DEBUG <<
91 bool "RPC: Enable dprintk debugging" <<
92 depends on SUNRPC && SYSCTL <<
93 select DEBUG_FS <<
94 help <<
95 This option enables a sysctl-based d <<
96 that is be used by the 'rpcdebug' ut <<
97 logging of different aspects of the <<
98 <<
99 Disabling this option will make your <<
100 but makes troubleshooting NFS issues <<
101 <<
102 If unsure, say Y. <<
103 <<
104 config SUNRPC_XPRT_RDMA <<
105 tristate "RPC-over-RDMA transport" <<
106 depends on SUNRPC && INFINIBAND && INF <<
107 default SUNRPC && INFINIBAND <<
108 select SG_POOL <<
109 help 48 help
110 This option allows the NFS client an !! 49 Choose Y here to enable Secure RPC using the SPKM3 public key
111 transports (InfiniBand, iWARP, or Ro !! 50 GSS-API mechanism (RFC 2025).
112 51
113 To compile this support as a module, !! 52 Secure RPC calls with SPKM3 require an auxiliary userspace
114 will be called rpcrdma.ko. !! 53 daemon which may be found in the Linux nfs-utils package
>> 54 available from http://linux-nfs.org/.
115 55
116 If unsure, or you know there is no R !! 56 If unsure, say N.
117 hardware platform, say N. <<
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.