2011-12-22 04:17:04 +08:00
|
|
|
config SECURITY_YAMA
|
|
|
|
|
bool "Yama support"
|
|
|
|
|
depends on SECURITY
|
|
|
|
|
select SECURITYFS
|
|
|
|
|
select SECURITY_PATH
|
|
|
|
|
default n
|
|
|
|
|
help
|
|
|
|
|
This selects Yama, which extends DAC support with additional
|
|
|
|
|
system-wide security settings beyond regular Linux discretionary
|
|
|
|
|
access controls. Currently available is ptrace scope restriction.
|
|
|
|
|
Further information can be found in Documentation/security/Yama.txt.
|
|
|
|
|
|
|
|
|
|
If you are unsure how to answer this question, answer N.
|
2012-09-05 04:32:13 +08:00
|
|
|
|
|
|
|
|
config SECURITY_YAMA_STACKED
|
|
|
|
|
bool "Yama stacked with other LSMs"
|
|
|
|
|
depends on SECURITY_YAMA
|
|
|
|
|
default n
|
|
|
|
|
help
|
|
|
|
|
When Yama is built into the kernel, force it to stack with the
|
|
|
|
|
selected primary LSM.
|
