Lines Matching +full:kernel +full:- +full:policy

1 # SPDX-License-Identifier: GPL-2.0-only
14 	  http://apparmor.wiki.kernel.org
43 	  Set the default value of the apparmor.debug kernel parameter.
45 	  the kernel message buffer.
48 	bool "Allow loaded policy to be introspected"
52 	  This option selects whether introspection of loaded policy
54 	  adds to kernel memory usage. It is required for introspection
55 	  of loaded policy, and check point and restore support. It
66 	  This option selects whether introspection of loaded policy
69 	  checking loaded policy.  This option adds to policy load
73        bool "Enable policy hash introspection by default"
77 	 This option selects whether sha256 hashing of loaded policy
79 	 loaded policy provide system administrators a quick way to
80 	 verify that policy in the kernel matches what is expected,
81 	 however it can slow down policy load on some devices. In
82 	 these cases policy hashing can be disabled by default and
86 	bool "Allow exporting the raw binary policy"
92 	  This option allows reading back binary policy as it was loaded.
93 	  It increases the amount of kernel memory needed by policy and
94 	  also increases policy load time. This option is required for
95 	  checkpoint and restore support, and debugging of loaded policy.
98 	bool "Perform full verification of loaded policy"
103 	  verification of loaded policy. This should not be disabled
105 	  includes policy, and has some form of integrity check.
106 	  Disabling the check will speed up policy loads.
116 	  in TAP format (https://testanything.org/). Only useful for kernel devs
121 	  to the KUnit documentation in Documentation/dev-tools/kunit/.