1ff0b16a9SEric Parisconfig FANOTIFY 2ff0b16a9SEric Paris bool "Filesystem wide access notification" 3ff0b16a9SEric Paris select FSNOTIFY 4ef601a9cSPaul Mundt select ANON_INODES 5ff0b16a9SEric Paris default y 6ff0b16a9SEric Paris ---help--- 7ff0b16a9SEric Paris Say Y here to enable fanotify suport. fanotify is a file access 8ff0b16a9SEric Paris notification system which differs from inotify in that it sends 9ff0b16a9SEric Paris and open file descriptor to the userspace listener along with 10ff0b16a9SEric Paris the event. 11ff0b16a9SEric Paris 12ff0b16a9SEric Paris If unsure, say Y. 13*9e66e423SEric Paris 14*9e66e423SEric Parisconfig FANOTIFY_ACCESS_PERMISSIONS 15*9e66e423SEric Paris bool "fanotify permissions checking" 16*9e66e423SEric Paris depends on FANOTIFY 17*9e66e423SEric Paris depends on SECURITY 18*9e66e423SEric Paris default n 19*9e66e423SEric Paris ---help--- 20*9e66e423SEric Paris Say Y here is you want fanotify listeners to be able to make permissions 21*9e66e423SEric Paris decisions concerning filesystem events. This is used by some fanotify 22*9e66e423SEric Paris listeners which need to scan files before allowing the system access to 23*9e66e423SEric Paris use those files. This is used by some anti-malware vendors and by some 24*9e66e423SEric Paris hierarchical storage managent systems. 25*9e66e423SEric Paris 26*9e66e423SEric Paris If unsure, say N. 27