Kconfig (58e16d792a6a8c6b750f637a4649967fcac853dc) | Kconfig (66f8e2f03c02e812002f8e9e465681cc62edda5b) |
---|---|
1# SPDX-License-Identifier: GPL-2.0-only 2config SECURITY_SELINUX 3 bool "NSA SELinux Support" 4 depends on SECURITY_NETWORK && AUDIT && NET && INET 5 select NETWORK_SECMARK 6 default n 7 help 8 This selects NSA Security-Enhanced Linux (SELinux). --- 71 unchanged lines hidden (view full) --- 80 SELinux will default to checking the protection that will be applied 81 by the kernel. If this option is set to 1 (one), SELinux will 82 default to checking the protection requested by the application. 83 The checkreqprot flag may be changed from the default via the 84 'checkreqprot=' boot parameter. It may also be changed at runtime 85 via /selinux/checkreqprot if authorized by policy. 86 87 If you are unsure how to answer this question, answer 0. | 1# SPDX-License-Identifier: GPL-2.0-only 2config SECURITY_SELINUX 3 bool "NSA SELinux Support" 4 depends on SECURITY_NETWORK && AUDIT && NET && INET 5 select NETWORK_SECMARK 6 default n 7 help 8 This selects NSA Security-Enhanced Linux (SELinux). --- 71 unchanged lines hidden (view full) --- 80 SELinux will default to checking the protection that will be applied 81 by the kernel. If this option is set to 1 (one), SELinux will 82 default to checking the protection requested by the application. 83 The checkreqprot flag may be changed from the default via the 84 'checkreqprot=' boot parameter. It may also be changed at runtime 85 via /selinux/checkreqprot if authorized by policy. 86 87 If you are unsure how to answer this question, answer 0. |
88 89config SECURITY_SELINUX_SIDTAB_HASH_BITS 90 int "NSA SELinux sidtab hashtable size" 91 depends on SECURITY_SELINUX 92 range 8 13 93 default 9 94 help 95 This option sets the number of buckets used in the sidtab hashtable 96 to 2^SECURITY_SELINUX_SIDTAB_HASH_BITS buckets. The number of hash 97 collisions may be viewed at /sys/fs/selinux/ss/sidtab_hash_stats. If 98 chain lengths are high (e.g. > 20) then selecting a higher value here 99 will ensure that lookups times are short and stable. |
|