| Kconfig (44c09201a4178e08ed1c8cc37e7aea0683888f0a) | Kconfig (cab00891c5489cb6d0cde0a55d39bd5f2871fa70) |
|---|---|
| 1config SECURITY_SELINUX 2 bool "NSA SELinux Support" 3 depends on SECURITY_NETWORK && AUDIT && NET && INET 4 select NETWORK_SECMARK 5 default n 6 help 7 This selects NSA Security-Enhanced Linux (SELinux). 8 You will also need a policy configuration and a labeled filesystem. --- 108 unchanged lines hidden (view full) --- 117 /selinux/compat_net. See Documentation/kernel-parameters.txt 118 for details on this parameter. 119 120 If you enable the new network controls, you will likely 121 also require the SECMARK and CONNSECMARK targets, as 122 well as any conntrack helpers for protocols which you 123 wish to control. 124 | 1config SECURITY_SELINUX 2 bool "NSA SELinux Support" 3 depends on SECURITY_NETWORK && AUDIT && NET && INET 4 select NETWORK_SECMARK 5 default n 6 help 7 This selects NSA Security-Enhanced Linux (SELinux). 8 You will also need a policy configuration and a labeled filesystem. --- 108 unchanged lines hidden (view full) --- 117 /selinux/compat_net. See Documentation/kernel-parameters.txt 118 for details on this parameter. 119 120 If you enable the new network controls, you will likely 121 also require the SECMARK and CONNSECMARK targets, as 122 well as any conntrack helpers for protocols which you 123 wish to control. 124 |
| 125 If you are unsure what do do here, select N. | 125 If you are unsure what to do here, select N. |
| 126 127config SECURITY_SELINUX_POLICYDB_VERSION_MAX 128 bool "NSA SELinux maximum supported policy format version" 129 depends on SECURITY_SELINUX 130 default n 131 help 132 This option enables the maximum policy format version supported 133 by SELinux to be set to a particular value. This value is reported --- 30 unchanged lines hidden --- | 126 127config SECURITY_SELINUX_POLICYDB_VERSION_MAX 128 bool "NSA SELinux maximum supported policy format version" 129 depends on SECURITY_SELINUX 130 default n 131 help 132 This option enables the maximum policy format version supported 133 by SELinux to be set to a particular value. This value is reported --- 30 unchanged lines hidden --- |