Loading...
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 | #
# For a description of the syntax of this configuration file,
# see scripts/kbuild/config-language.txt.
#
menu "Selinux Utilities"
depends on SELINUX
config CHCON
bool "chcon"
default n
depends on SELINUX
help
Enable support to change the security context of file.
config FEATURE_CHCON_LONG_OPTIONS
bool "Enable long options"
default y
depends on CHCON && GETOPT_LONG
help
Support long options for the chcon applet.
config GETENFORCE
bool "getenforce"
default n
depends on SELINUX
help
Enable support to get the current mode of SELinux.
config GETSEBOOL
bool "getsebool"
default n
depends on SELINUX
help
Enable support to get SELinux boolean values.
config LOAD_POLICY
bool "load_policy"
default n
depends on SELINUX
help
Enable support to load SELinux policy.
config MATCHPATHCON
bool "matchpathcon"
default n
depends on SELINUX
help
Enable support to get default security context of the
specified path from the file contexts configuration.
config RESTORECON
bool "restorecon"
default n
depends on SELINUX
help
Enable support to relabel files. The feature is almost
the same as setfiles, but usage is a little different.
config RUNCON
bool "runcon"
default n
depends on SELINUX
help
Enable support to run command in speficied security context.
config FEATURE_RUNCON_LONG_OPTIONS
bool "Enable long options"
default y
depends on RUNCON && GETOPT_LONG
help
Support long options for the runcon applet.
config SELINUXENABLED
bool "selinuxenabled"
default n
depends on SELINUX
help
Enable support for this command to be used within shell scripts
to determine if selinux is enabled.
config SETENFORCE
bool "setenforce"
default n
depends on SELINUX
help
Enable support to modify the mode SELinux is running in.
config SETFILES
bool "setfiles"
default n
depends on SELINUX
help
Enable support to modify to relabel files.
Notice: If you built libselinux with -D_FILE_OFFSET_BITS=64,
(It is default in libselinux's Makefile), you _must_ enable
CONFIG_LFS.
config FEATURE_SETFILES_CHECK_OPTION
bool "Enable check option"
default n
depends on SETFILES
help
Support "-c" option (check the validity of the contexts against
the specified binary policy) for setfiles. Requires libsepol.
endmenu
|