1 # SPDX-License-Identifier: GPL-2.0-only << 2 config SECURITY_TOMOYO 1 config SECURITY_TOMOYO 3 bool "TOMOYO Linux Support" 2 bool "TOMOYO Linux Support" 4 depends on SECURITY 3 depends on SECURITY 5 depends on NET << 6 select SECURITYFS 4 select SECURITYFS 7 select SECURITY_PATH 5 select SECURITY_PATH 8 select SECURITY_NETWORK << 9 default n 6 default n 10 help 7 help 11 This selects TOMOYO Linux, pathname- 8 This selects TOMOYO Linux, pathname-based access control. 12 Required userspace tools and further 9 Required userspace tools and further information may be 13 found at <https://tomoyo.sourceforge !! 10 found at <http://tomoyo.sourceforge.jp/>. 14 If you are unsure how to answer this 11 If you are unsure how to answer this question, answer N. 15 << 16 config SECURITY_TOMOYO_MAX_ACCEPT_ENTRY << 17 int "Default maximal count for learnin << 18 default 2048 << 19 range 0 2147483647 << 20 depends on SECURITY_TOMOYO << 21 help << 22 This is the default value for maxima << 23 that are automatically appended into << 24 Some programs access thousands of ob << 25 such programs in "learning mode" dul << 26 and consumes much memory. << 27 This is the safeguard for such progr << 28 << 29 config SECURITY_TOMOYO_MAX_AUDIT_LOG << 30 int "Default maximal count for audit l << 31 default 1024 << 32 range 0 2147483647 << 33 depends on SECURITY_TOMOYO << 34 help << 35 This is the default value for maxima << 36 audit logs that the kernel can hold << 37 You can read the log via /sys/kernel << 38 If you don't need audit logs, you ma << 39 << 40 config SECURITY_TOMOYO_OMIT_USERSPACE_LOADER << 41 bool "Activate without calling userspa << 42 default n << 43 depends on SECURITY_TOMOYO << 44 help << 45 Say Y here if you want to activate a << 46 policy was loaded. This option will << 47 operations which can lead to the hij << 48 needed before loading the policy. Fo << 49 immediately after loading the fixed << 50 only operations needed for mounting << 51 variant part of policy and verifying << 52 loading the variant part of policy. << 53 enforcing mode from the beginning, y << 54 hijacking the boot sequence. << 55 << 56 config SECURITY_TOMOYO_POLICY_LOADER << 57 string "Location of userspace policy l << 58 default "/sbin/tomoyo-init" << 59 depends on SECURITY_TOMOYO << 60 depends on !SECURITY_TOMOYO_OMIT_USERS << 61 help << 62 This is the default pathname of poli << 63 activation. You can override this se << 64 command line option. << 65 << 66 config SECURITY_TOMOYO_ACTIVATION_TRIGGER << 67 string "Trigger for calling userspace << 68 default "/sbin/init" << 69 depends on SECURITY_TOMOYO << 70 depends on !SECURITY_TOMOYO_OMIT_USERS << 71 help << 72 This is the default pathname of acti << 73 You can override this setting via TO << 74 option. For example, if you pass ini << 75 want to also pass TOMOYO_trigger=/bi << 76 << 77 config SECURITY_TOMOYO_INSECURE_BUILTIN_SETTIN << 78 bool "Use insecure built-in settings f << 79 default n << 80 depends on SECURITY_TOMOYO << 81 select SECURITY_TOMOYO_OMIT_USERSPACE_ << 82 help << 83 Enabling this option forces minimal << 84 domain/program checks for run-time p << 85 this option only if this kernel is b <<
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.