Kconfig (58e16d792a6a8c6b750f637a4649967fcac853dc) Kconfig (66f8e2f03c02e812002f8e9e465681cc62edda5b)
1# SPDX-License-Identifier: GPL-2.0-only
2config SECURITY_SELINUX
3 bool "NSA SELinux Support"
4 depends on SECURITY_NETWORK && AUDIT && NET && INET
5 select NETWORK_SECMARK
6 default n
7 help
8 This selects NSA Security-Enhanced Linux (SELinux).

--- 71 unchanged lines hidden (view full) ---

80 SELinux will default to checking the protection that will be applied
81 by the kernel. If this option is set to 1 (one), SELinux will
82 default to checking the protection requested by the application.
83 The checkreqprot flag may be changed from the default via the
84 'checkreqprot=' boot parameter. It may also be changed at runtime
85 via /selinux/checkreqprot if authorized by policy.
86
87 If you are unsure how to answer this question, answer 0.
1# SPDX-License-Identifier: GPL-2.0-only
2config SECURITY_SELINUX
3 bool "NSA SELinux Support"
4 depends on SECURITY_NETWORK && AUDIT && NET && INET
5 select NETWORK_SECMARK
6 default n
7 help
8 This selects NSA Security-Enhanced Linux (SELinux).

--- 71 unchanged lines hidden (view full) ---

80 SELinux will default to checking the protection that will be applied
81 by the kernel. If this option is set to 1 (one), SELinux will
82 default to checking the protection requested by the application.
83 The checkreqprot flag may be changed from the default via the
84 'checkreqprot=' boot parameter. It may also be changed at runtime
85 via /selinux/checkreqprot if authorized by policy.
86
87 If you are unsure how to answer this question, answer 0.
88
89config SECURITY_SELINUX_SIDTAB_HASH_BITS
90 int "NSA SELinux sidtab hashtable size"
91 depends on SECURITY_SELINUX
92 range 8 13
93 default 9
94 help
95 This option sets the number of buckets used in the sidtab hashtable
96 to 2^SECURITY_SELINUX_SIDTAB_HASH_BITS buckets. The number of hash
97 collisions may be viewed at /sys/fs/selinux/ss/sidtab_hash_stats. If
98 chain lengths are high (e.g. > 20) then selecting a higher value here
99 will ensure that lookups times are short and stable.