Lines Matching +full:kernel +full:- +full:policy

1 # SPDX-License-Identifier: GPL-2.0-only
14 	  http://apparmor.wiki.kernel.org
43 	  Set the default value of the apparmor.debug kernel parameter.
45 	  the kernel message buffer.
48 	bool "Allow loaded policy to be introspected"
52 	  This option selects whether introspection of loaded policy
54 	  adds to kernel memory usage. It is required for introspection
55 	  of loaded policy, and check point and restore support. It
65 	  This option selects whether introspection of loaded policy
68 	  checking loaded policy.  This option adds to policy load
72        bool "Enable policy hash introspection by default"
76 	 This option selects whether sha256 hashing of loaded policy
78 	 loaded policy provide system administrators a quick way to
79 	 verify that policy in the kernel matches what is expected,
80 	 however it can slow down policy load on some devices. In
81 	 these cases policy hashing can be disabled by default and
85 	bool "Allow exporting the raw binary policy"
91 	  This option allows reading back binary policy as it was loaded.
92 	  It increases the amount of kernel memory needed by policy and
93 	  also increases policy load time. This option is required for
94 	  checkpoint and restore support, and debugging of loaded policy.
97 	bool "Perform full verification of loaded policy"
102 	  verification of loaded policy. This should not be disabled
104 	  includes policy, and has some form of integrity check.
105 	  Disabling the check will speed up policy loads.
115 	  in TAP format (https://testanything.org/). Only useful for kernel devs
120 	  to the KUnit documentation in Documentation/dev-tools/kunit/.