X-Git-Url: http://git.rot13.org/?a=blobdiff_plain;f=security%2FKconfig;h=389e151e3b68e832d7b63b9623e10098d6d2e03b;hb=63e9b66e29357dd12e8b1d3ebf7036e7591f81e3;hp=67785df264e511c83550455240f633dc99cc3483;hpb=f28e71617ddaf2483e3e5c5237103484a303743f;p=powerpc.git diff --git a/security/Kconfig b/security/Kconfig index 67785df264..389e151e3b 100644 --- a/security/Kconfig +++ b/security/Kconfig @@ -74,15 +74,26 @@ config SECURITY_NETWORK_XFRM If you are unsure how to answer this question, answer N. config SECURITY_CAPABILITIES - tristate "Default Linux Capabilities" + bool "Default Linux Capabilities" depends on SECURITY + default y help This enables the "default" Linux capabilities functionality. If you are unsure how to answer this question, answer Y. +config SECURITY_FILE_CAPABILITIES + bool "File POSIX Capabilities (EXPERIMENTAL)" + depends on (SECURITY=n || SECURITY_CAPABILITIES!=n) && EXPERIMENTAL + default n + help + This enables filesystem capabilities, allowing you to give + binaries a subset of root's powers without using setuid 0. + + If in doubt, answer N. + config SECURITY_ROOTPLUG - tristate "Root Plug Support" - depends on USB && SECURITY + bool "Root Plug Support" + depends on USB=y && SECURITY help This is a sample LSM module that should only be used as such. It prevents any programs running with egid == 0 if a specific @@ -93,18 +104,6 @@ config SECURITY_ROOTPLUG If you are unsure how to answer this question, answer N. -config SECURITY_SECLVL - tristate "BSD Secure Levels" - depends on SECURITY - select CRYPTO - select CRYPTO_SHA1 - help - Implements BSD Secure Levels as an LSM. See - for instructions on how to use this - module. - - If you are unsure how to answer this question, answer N. - source security/selinux/Kconfig endmenu