1 # SPDX-License-Identifier: GPL-2.0-only
2 config SECURITY_TOMOYO
3 bool "TOMOYO Linux Support"
4 depends on SECURITY
5 depends on NET
6 select SECURITYFS
7 select SECURITY_PATH
8 select SECURITY_NETWORK
9 default n
10 help
11 This selects TOMOYO Linux, pathname-
12 Required userspace tools and further
13 found at <https://tomoyo.sourceforge
14 If you are unsure how to answer this
15
16 config SECURITY_TOMOYO_MAX_ACCEPT_ENTRY
17 int "Default maximal count for learnin
18 default 2048
19 range 0 2147483647
20 depends on SECURITY_TOMOYO
21 help
22 This is the default value for maxima
23 that are automatically appended into
24 Some programs access thousands of ob
25 such programs in "learning mode" dul
26 and consumes much memory.
27 This is the safeguard for such progr
28
29 config SECURITY_TOMOYO_MAX_AUDIT_LOG
30 int "Default maximal count for audit l
31 default 1024
32 range 0 2147483647
33 depends on SECURITY_TOMOYO
34 help
35 This is the default value for maxima
36 audit logs that the kernel can hold
37 You can read the log via /sys/kernel
38 If you don't need audit logs, you ma
39
40 config SECURITY_TOMOYO_OMIT_USERSPACE_LOADER
41 bool "Activate without calling userspa
42 default n
43 depends on SECURITY_TOMOYO
44 help
45 Say Y here if you want to activate a
46 policy was loaded. This option will
47 operations which can lead to the hij
48 needed before loading the policy. Fo
49 immediately after loading the fixed
50 only operations needed for mounting
51 variant part of policy and verifying
52 loading the variant part of policy.
53 enforcing mode from the beginning, y
54 hijacking the boot sequence.
55
56 config SECURITY_TOMOYO_POLICY_LOADER
57 string "Location of userspace policy l
58 default "/sbin/tomoyo-init"
59 depends on SECURITY_TOMOYO
60 depends on !SECURITY_TOMOYO_OMIT_USERS
61 help
62 This is the default pathname of poli
63 activation. You can override this se
64 command line option.
65
66 config SECURITY_TOMOYO_ACTIVATION_TRIGGER
67 string "Trigger for calling userspace
68 default "/sbin/init"
69 depends on SECURITY_TOMOYO
70 depends on !SECURITY_TOMOYO_OMIT_USERS
71 help
72 This is the default pathname of acti
73 You can override this setting via TO
74 option. For example, if you pass ini
75 want to also pass TOMOYO_trigger=/bi
76
77 config SECURITY_TOMOYO_INSECURE_BUILTIN_SETTIN
78 bool "Use insecure built-in settings f
79 default n
80 depends on SECURITY_TOMOYO
81 select SECURITY_TOMOYO_OMIT_USERSPACE_
82 help
83 Enabling this option forces minimal
84 domain/program checks for run-time p
85 this option only if this kernel is b
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.