xref: /linux/security/apparmor/Kconfig (revision 06c22dadc6d3f9b65e55407a87faaf6a4a014112)
1016d825fSJohn Johansenconfig SECURITY_APPARMOR
2016d825fSJohn Johansen	bool "AppArmor support"
3*06c22dadSRandy Dunlap	depends on SECURITY && NET
4016d825fSJohn Johansen	select AUDIT
5016d825fSJohn Johansen	select SECURITY_PATH
6016d825fSJohn Johansen	select SECURITYFS
7016d825fSJohn Johansen	select SECURITY_NETWORK
8016d825fSJohn Johansen	default n
9016d825fSJohn Johansen	help
10016d825fSJohn Johansen	  This enables the AppArmor security module.
11016d825fSJohn Johansen	  Required userspace tools (if they are not included in your
12016d825fSJohn Johansen	  distribution) and further information may be found at
13016d825fSJohn Johansen	  http://apparmor.wiki.kernel.org
14016d825fSJohn Johansen
15016d825fSJohn Johansen	  If you are unsure how to answer this question, answer N.
16016d825fSJohn Johansen
17016d825fSJohn Johansenconfig SECURITY_APPARMOR_BOOTPARAM_VALUE
18016d825fSJohn Johansen	int "AppArmor boot parameter default value"
19016d825fSJohn Johansen	depends on SECURITY_APPARMOR
20016d825fSJohn Johansen	range 0 1
21016d825fSJohn Johansen	default 1
22016d825fSJohn Johansen	help
23016d825fSJohn Johansen	  This option sets the default value for the kernel parameter
24016d825fSJohn Johansen	  'apparmor', which allows AppArmor to be enabled or disabled
25016d825fSJohn Johansen          at boot.  If this option is set to 0 (zero), the AppArmor
26016d825fSJohn Johansen	  kernel parameter will default to 0, disabling AppArmor at
27016d825fSJohn Johansen	  boot.  If this option is set to 1 (one), the AppArmor
28016d825fSJohn Johansen	  kernel parameter will default to 1, enabling AppArmor at
29016d825fSJohn Johansen	  boot.
30016d825fSJohn Johansen
31016d825fSJohn Johansen	  If you are unsure how to answer this question, answer 1.
32