126 lines
3.5 KiB
Text
126 lines
3.5 KiB
Text
|
# DO NOT EDIT. This file is generated from Config.src
|
||
|
#
|
||
|
# For a description of the syntax of this configuration file,
|
||
|
# see scripts/kbuild/config-language.txt.
|
||
|
#
|
||
|
|
||
|
menu "SELinux Utilities"
|
||
|
depends on BUSYBOX_CONFIG_SELINUX
|
||
|
|
||
|
|
||
|
|
||
|
config BUSYBOX_CONFIG_CHCON
|
||
|
bool "chcon"
|
||
|
default BUSYBOX_DEFAULT_CHCON
|
||
|
depends on BUSYBOX_CONFIG_SELINUX
|
||
|
help
|
||
|
Enable support to change the security context of file.
|
||
|
|
||
|
config BUSYBOX_CONFIG_FEATURE_CHCON_LONG_OPTIONS
|
||
|
bool "Enable long options"
|
||
|
default BUSYBOX_DEFAULT_FEATURE_CHCON_LONG_OPTIONS
|
||
|
depends on BUSYBOX_CONFIG_CHCON && BUSYBOX_CONFIG_LONG_OPTS
|
||
|
help
|
||
|
Support long options for the chcon applet.
|
||
|
|
||
|
config BUSYBOX_CONFIG_GETENFORCE
|
||
|
bool "getenforce"
|
||
|
default BUSYBOX_DEFAULT_GETENFORCE
|
||
|
depends on BUSYBOX_CONFIG_SELINUX
|
||
|
help
|
||
|
Enable support to get the current mode of SELinux.
|
||
|
|
||
|
config BUSYBOX_CONFIG_GETSEBOOL
|
||
|
bool "getsebool"
|
||
|
default BUSYBOX_DEFAULT_GETSEBOOL
|
||
|
depends on BUSYBOX_CONFIG_SELINUX
|
||
|
help
|
||
|
Enable support to get SELinux boolean values.
|
||
|
|
||
|
config BUSYBOX_CONFIG_LOAD_POLICY
|
||
|
bool "load_policy"
|
||
|
default BUSYBOX_DEFAULT_LOAD_POLICY
|
||
|
depends on BUSYBOX_CONFIG_SELINUX
|
||
|
help
|
||
|
Enable support to load SELinux policy.
|
||
|
|
||
|
config BUSYBOX_CONFIG_MATCHPATHCON
|
||
|
bool "matchpathcon"
|
||
|
default BUSYBOX_DEFAULT_MATCHPATHCON
|
||
|
depends on BUSYBOX_CONFIG_SELINUX
|
||
|
help
|
||
|
Enable support to get default security context of the
|
||
|
specified path from the file contexts configuration.
|
||
|
|
||
|
config BUSYBOX_CONFIG_RESTORECON
|
||
|
bool "restorecon"
|
||
|
default BUSYBOX_DEFAULT_RESTORECON
|
||
|
depends on BUSYBOX_CONFIG_SELINUX
|
||
|
help
|
||
|
Enable support to relabel files. The feature is almost
|
||
|
the same as setfiles, but usage is a little different.
|
||
|
|
||
|
config BUSYBOX_CONFIG_RUNCON
|
||
|
bool "runcon"
|
||
|
default BUSYBOX_DEFAULT_RUNCON
|
||
|
depends on BUSYBOX_CONFIG_SELINUX
|
||
|
help
|
||
|
Enable support to run command in speficied security context.
|
||
|
|
||
|
config BUSYBOX_CONFIG_FEATURE_RUNCON_LONG_OPTIONS
|
||
|
bool "Enable long options"
|
||
|
default BUSYBOX_DEFAULT_FEATURE_RUNCON_LONG_OPTIONS
|
||
|
depends on BUSYBOX_CONFIG_RUNCON && BUSYBOX_CONFIG_LONG_OPTS
|
||
|
help
|
||
|
Support long options for the runcon applet.
|
||
|
|
||
|
config BUSYBOX_CONFIG_SELINUXENABLED
|
||
|
bool "selinuxenabled"
|
||
|
default BUSYBOX_DEFAULT_SELINUXENABLED
|
||
|
depends on BUSYBOX_CONFIG_SELINUX
|
||
|
help
|
||
|
Enable support for this command to be used within shell scripts
|
||
|
to determine if selinux is enabled.
|
||
|
|
||
|
config BUSYBOX_CONFIG_SETENFORCE
|
||
|
bool "setenforce"
|
||
|
default BUSYBOX_DEFAULT_SETENFORCE
|
||
|
depends on BUSYBOX_CONFIG_SELINUX
|
||
|
help
|
||
|
Enable support to modify the mode SELinux is running in.
|
||
|
|
||
|
config BUSYBOX_CONFIG_SETFILES
|
||
|
bool "setfiles"
|
||
|
default BUSYBOX_DEFAULT_SETFILES
|
||
|
depends on BUSYBOX_CONFIG_SELINUX
|
||
|
help
|
||
|
Enable support to modify to relabel files.
|
||
|
Notice: If you built libselinux with -D_FILE_OFFSET_BITS=64,
|
||
|
(It is default in libselinux's Makefile), you _must_ enable
|
||
|
CONFIG_LFS.
|
||
|
|
||
|
config BUSYBOX_CONFIG_FEATURE_SETFILES_CHECK_OPTION
|
||
|
bool "Enable check option"
|
||
|
default BUSYBOX_DEFAULT_FEATURE_SETFILES_CHECK_OPTION
|
||
|
depends on BUSYBOX_CONFIG_SETFILES
|
||
|
help
|
||
|
Support "-c" option (check the validity of the contexts against
|
||
|
the specified binary policy) for setfiles. Requires libsepol.
|
||
|
|
||
|
config BUSYBOX_CONFIG_SETSEBOOL
|
||
|
bool "setsebool"
|
||
|
default BUSYBOX_DEFAULT_SETSEBOOL
|
||
|
depends on BUSYBOX_CONFIG_SELINUX
|
||
|
help
|
||
|
Enable support for change boolean.
|
||
|
semanage and -P option is not supported yet.
|
||
|
|
||
|
config BUSYBOX_CONFIG_SESTATUS
|
||
|
bool "sestatus"
|
||
|
default BUSYBOX_DEFAULT_SESTATUS
|
||
|
depends on BUSYBOX_CONFIG_SELINUX
|
||
|
help
|
||
|
Displays the status of SELinux.
|
||
|
|
||
|
endmenu
|