summaryrefslogtreecommitdiff
path: root/selinux/Config.src
diff options
context:
space:
mode:
Diffstat (limited to 'selinux/Config.src')
-rw-r--r--selinux/Config.src123
1 files changed, 123 insertions, 0 deletions
diff --git a/selinux/Config.src b/selinux/Config.src
new file mode 100644
index 000000000..e46030adf
--- /dev/null
+++ b/selinux/Config.src
@@ -0,0 +1,123 @@
1#
2# For a description of the syntax of this configuration file,
3# see scripts/kbuild/config-language.txt.
4#
5
6menu "SELinux Utilities"
7 depends on SELINUX
8
9config CHCON
10 bool "chcon"
11 default n
12 depends on SELINUX
13 help
14 Enable support to change the security context of file.
15
16config FEATURE_CHCON_LONG_OPTIONS
17 bool "Enable long options"
18 default y
19 depends on CHCON && LONG_OPTS
20 help
21 Support long options for the chcon applet.
22
23config GETENFORCE
24 bool "getenforce"
25 default n
26 depends on SELINUX
27 help
28 Enable support to get the current mode of SELinux.
29
30config GETSEBOOL
31 bool "getsebool"
32 default n
33 depends on SELINUX
34 help
35 Enable support to get SELinux boolean values.
36
37config LOAD_POLICY
38 bool "load_policy"
39 default n
40 depends on SELINUX
41 help
42 Enable support to load SELinux policy.
43
44config MATCHPATHCON
45 bool "matchpathcon"
46 default n
47 depends on SELINUX
48 help
49 Enable support to get default security context of the
50 specified path from the file contexts configuration.
51
52config RESTORECON
53 bool "restorecon"
54 default n
55 depends on SELINUX
56 help
57 Enable support to relabel files. The feature is almost
58 the same as setfiles, but usage is a little different.
59
60config RUNCON
61 bool "runcon"
62 default n
63 depends on SELINUX
64 help
65 Enable support to run command in speficied security context.
66
67config FEATURE_RUNCON_LONG_OPTIONS
68 bool "Enable long options"
69 default y
70 depends on RUNCON && LONG_OPTS
71 help
72 Support long options for the runcon applet.
73
74config SELINUXENABLED
75 bool "selinuxenabled"
76 default n
77 depends on SELINUX
78 help
79 Enable support for this command to be used within shell scripts
80 to determine if selinux is enabled.
81
82config SETENFORCE
83 bool "setenforce"
84 default n
85 depends on SELINUX
86 help
87 Enable support to modify the mode SELinux is running in.
88
89config SETFILES
90 bool "setfiles"
91 default n
92 depends on SELINUX
93 help
94 Enable support to modify to relabel files.
95 Notice: If you built libselinux with -D_FILE_OFFSET_BITS=64,
96 (It is default in libselinux's Makefile), you _must_ enable
97 CONFIG_LFS.
98
99config FEATURE_SETFILES_CHECK_OPTION
100 bool "Enable check option"
101 default n
102 depends on SETFILES
103 help
104 Support "-c" option (check the validity of the contexts against
105 the specified binary policy) for setfiles. Requires libsepol.
106
107config SETSEBOOL
108 bool "setsebool"
109 default n
110 depends on SELINUX
111 help
112 Enable support for change boolean.
113 semanage and -P option is not supported yet.
114
115config SESTATUS
116 bool "sestatus"
117 default n
118 depends on SELINUX
119 help
120 Displays the status of SELinux.
121
122endmenu
123