config BR2_PACKAGE_APPARMOR
|
bool "apparmor"
|
depends on BR2_USE_MMU # fork()
|
depends on BR2_INSTALL_LIBSTDCPP
|
depends on BR2_TOOLCHAIN_HAS_SYNC_4 # libapparmor
|
depends on BR2_TOOLCHAIN_HAS_THREADS # libapparmor
|
depends on BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_16 # libapparmor
|
select BR2_PACKAGE_LIBAPPARMOR
|
help
|
AppArmor is an effective and easy-to-use Linux application
|
security system. AppArmor proactively protects the operating
|
system and applications from external or internal threats,
|
even zero-day attacks, by enforcing good behavior and
|
preventing even unknown application flaws from being
|
exploited.
|
|
This package builds the parser (which can load profiles).
|
|
http://wiki.apparmor.net
|
|
if BR2_PACKAGE_APPARMOR
|
|
config BR2_PACKAGE_APPARMOR_BINUTILS
|
bool "binutils"
|
help
|
A set of utilities (written in C):
|
aa-enabled aa-exec
|
|
comment "utils need python3"
|
depends on !BR2_PACKAGE_PYTHON3
|
|
config BR2_PACKAGE_APPARMOR_UTILS
|
bool "utils"
|
depends on BR2_PACKAGE_PYTHON3
|
select BR2_PACKAGE_BUSYBOX_SHOW_OTHERS # net-tools
|
select BR2_PACKAGE_NET_TOOLS # runtime (aa-unconfined)
|
select BR2_PACKAGE_PYTHON3_READLINE
|
help
|
A set of utilities (written in python):
|
aa-audit aa-disable aa-logprof
|
aa-autodep aa-easyprof aa-mergeprof
|
aa-cleanprof aa-enforce aa-status
|
aa-complain aa-genprof aa-unconfined
|
|
if BR2_PACKAGE_APPARMOR_UTILS
|
|
comment "utils (extras) need bash and perl, and busybox or gawk"
|
depends on !BR2_PACKAGE_BASH || !BR2_PACKAGE_PERL \
|
|| !(BR2_PACKAGE_BUSYBOX || BR2_PACKAGE_GAWK)
|
|
config BR2_PACKAGE_APPARMOR_UTILS_EXTRA
|
bool "utils (extras)"
|
depends on BR2_PACKAGE_BASH
|
depends on BR2_PACKAGE_PERL
|
depends on BR2_PACKAGE_BUSYBOX || BR2_PACKAGE_GAWK
|
help
|
An extra set of utilities (written in a mixture of sh,
|
bash, perl, and awk):
|
aa-decode (bash + perl)
|
aa-notify (perl)
|
aa-remove-unknown (sh + awk)
|
|
endif # BR2_PACKAGE_APPARMOR_UTILS
|
|
config BR2_PACKAGE_APPARMOR_PROFILES
|
bool "profiles"
|
help
|
Installs server-class profiles for a wide range of
|
usual programs and daemons.
|
|
endif # BR2_PACKAGE_APPARMOR
|
|
comment "apparmor needs a toolchain w/ headers >= 3.16, threads, C++"
|
depends on BR2_USE_MMU
|
depends on BR2_TOOLCHAIN_HAS_SYNC_4
|
depends on !BR2_INSTALL_LIBSTDCPP || !BR2_TOOLCHAIN_HAS_THREADS \
|
|| !BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_16
|
