.. | .. |
---|
| 1 | +# SPDX-License-Identifier: GPL-2.0-only |
---|
1 | 2 | config CIFS |
---|
2 | 3 | tristate "SMB3 and CIFS support (advanced network filesystem)" |
---|
3 | 4 | depends on INET |
---|
.. | .. |
---|
9 | 10 | select CRYPTO_SHA512 |
---|
10 | 11 | select CRYPTO_CMAC |
---|
11 | 12 | select CRYPTO_HMAC |
---|
12 | | - select CRYPTO_ARC4 |
---|
| 13 | + select CRYPTO_LIB_ARC4 |
---|
13 | 14 | select CRYPTO_AEAD2 |
---|
14 | 15 | select CRYPTO_CCM |
---|
| 16 | + select CRYPTO_GCM |
---|
15 | 17 | select CRYPTO_ECB |
---|
16 | 18 | select CRYPTO_AES |
---|
17 | | - select CRYPTO_DES |
---|
| 19 | + select CRYPTO_LIB_DES |
---|
| 20 | + select KEYS |
---|
18 | 21 | help |
---|
19 | 22 | This is the client VFS module for the SMB3 family of NAS protocols, |
---|
20 | 23 | (including support for the most recent, most secure dialect SMB3.1.1) |
---|
.. | .. |
---|
108 | 111 | |
---|
109 | 112 | config CIFS_UPCALL |
---|
110 | 113 | bool "Kerberos/SPNEGO advanced session setup" |
---|
111 | | - depends on CIFS && KEYS |
---|
| 114 | + depends on CIFS |
---|
112 | 115 | select DNS_RESOLVER |
---|
113 | 116 | help |
---|
114 | 117 | Enables an upcall mechanism for CIFS which accesses userspace helper |
---|
.. | .. |
---|
117 | 120 | secure Kerberos authentication is required). If unsure, say Y. |
---|
118 | 121 | |
---|
119 | 122 | config CIFS_XATTR |
---|
120 | | - bool "CIFS extended attributes" |
---|
121 | | - depends on CIFS |
---|
122 | | - help |
---|
123 | | - Extended attributes are name:value pairs associated with inodes by |
---|
124 | | - the kernel or by users (see the attr(5) manual page for details). |
---|
125 | | - CIFS maps the name of extended attributes beginning with the user |
---|
126 | | - namespace prefix to SMB/CIFS EAs. EAs are stored on Windows |
---|
127 | | - servers without the user namespace prefix, but their names are |
---|
128 | | - seen by Linux cifs clients prefaced by the user namespace prefix. |
---|
129 | | - The system namespace (used by some filesystems to store ACLs) is |
---|
130 | | - not supported at this time. |
---|
| 123 | + bool "CIFS extended attributes" |
---|
| 124 | + depends on CIFS |
---|
| 125 | + help |
---|
| 126 | + Extended attributes are name:value pairs associated with inodes by |
---|
| 127 | + the kernel or by users (see the attr(5) manual page for details). |
---|
| 128 | + CIFS maps the name of extended attributes beginning with the user |
---|
| 129 | + namespace prefix to SMB/CIFS EAs. EAs are stored on Windows |
---|
| 130 | + servers without the user namespace prefix, but their names are |
---|
| 131 | + seen by Linux cifs clients prefaced by the user namespace prefix. |
---|
| 132 | + The system namespace (used by some filesystems to store ACLs) is |
---|
| 133 | + not supported at this time. |
---|
131 | 134 | |
---|
132 | | - If unsure, say Y. |
---|
| 135 | + If unsure, say Y. |
---|
133 | 136 | |
---|
134 | 137 | config CIFS_POSIX |
---|
135 | | - bool "CIFS POSIX Extensions" |
---|
136 | | - depends on CIFS && CIFS_ALLOW_INSECURE_LEGACY && CIFS_XATTR |
---|
137 | | - help |
---|
138 | | - Enabling this option will cause the cifs client to attempt to |
---|
| 138 | + bool "CIFS POSIX Extensions" |
---|
| 139 | + depends on CIFS && CIFS_ALLOW_INSECURE_LEGACY && CIFS_XATTR |
---|
| 140 | + help |
---|
| 141 | + Enabling this option will cause the cifs client to attempt to |
---|
139 | 142 | negotiate a newer dialect with servers, such as Samba 3.0.5 |
---|
140 | 143 | or later, that optionally can handle more POSIX like (rather |
---|
141 | 144 | than Windows like) file behavior. It also enables |
---|
.. | .. |
---|
143 | 146 | (such as Samba 3.10 and later) which can negotiate |
---|
144 | 147 | CIFS POSIX ACL support. If unsure, say N. |
---|
145 | 148 | |
---|
146 | | -config CIFS_ACL |
---|
147 | | - bool "Provide CIFS ACL support" |
---|
148 | | - depends on CIFS_XATTR && KEYS |
---|
149 | | - help |
---|
150 | | - Allows fetching CIFS/NTFS ACL from the server. The DACL blob |
---|
151 | | - is handed over to the application/caller. See the man |
---|
152 | | - page for getcifsacl for more information. If unsure, say Y. |
---|
153 | | - |
---|
154 | 149 | config CIFS_DEBUG |
---|
155 | 150 | bool "Enable CIFS debugging routines" |
---|
156 | 151 | default y |
---|
157 | 152 | depends on CIFS |
---|
158 | 153 | help |
---|
159 | | - Enabling this option adds helpful debugging messages to |
---|
160 | | - the cifs code which increases the size of the cifs module. |
---|
161 | | - If unsure, say Y. |
---|
| 154 | + Enabling this option adds helpful debugging messages to |
---|
| 155 | + the cifs code which increases the size of the cifs module. |
---|
| 156 | + If unsure, say Y. |
---|
| 157 | + |
---|
162 | 158 | config CIFS_DEBUG2 |
---|
163 | 159 | bool "Enable additional CIFS debugging routines" |
---|
164 | 160 | depends on CIFS_DEBUG |
---|
165 | 161 | help |
---|
166 | | - Enabling this option adds a few more debugging routines |
---|
167 | | - to the cifs code which slightly increases the size of |
---|
168 | | - the cifs module and can cause additional logging of debug |
---|
169 | | - messages in some error paths, slowing performance. This |
---|
170 | | - option can be turned off unless you are debugging |
---|
171 | | - cifs problems. If unsure, say N. |
---|
| 162 | + Enabling this option adds a few more debugging routines |
---|
| 163 | + to the cifs code which slightly increases the size of |
---|
| 164 | + the cifs module and can cause additional logging of debug |
---|
| 165 | + messages in some error paths, slowing performance. This |
---|
| 166 | + option can be turned off unless you are debugging |
---|
| 167 | + cifs problems. If unsure, say N. |
---|
172 | 168 | |
---|
173 | 169 | config CIFS_DEBUG_DUMP_KEYS |
---|
174 | 170 | bool "Dump encryption keys for offline decryption (Unsafe)" |
---|
175 | 171 | depends on CIFS_DEBUG |
---|
176 | 172 | help |
---|
177 | | - Enabling this will dump the encryption and decryption keys |
---|
178 | | - used to communicate on an encrypted share connection on the |
---|
179 | | - console. This allows Wireshark to decrypt and dissect |
---|
180 | | - encrypted network captures. Enable this carefully. |
---|
181 | | - If unsure, say N. |
---|
| 173 | + Enabling this will dump the encryption and decryption keys |
---|
| 174 | + used to communicate on an encrypted share connection on the |
---|
| 175 | + console. This allows Wireshark to decrypt and dissect |
---|
| 176 | + encrypted network captures. Enable this carefully. |
---|
| 177 | + If unsure, say N. |
---|
182 | 178 | |
---|
183 | 179 | config CIFS_DFS_UPCALL |
---|
184 | | - bool "DFS feature support" |
---|
185 | | - depends on CIFS && KEYS |
---|
186 | | - select DNS_RESOLVER |
---|
187 | | - help |
---|
188 | | - Distributed File System (DFS) support is used to access shares |
---|
189 | | - transparently in an enterprise name space, even if the share |
---|
190 | | - moves to a different server. This feature also enables |
---|
191 | | - an upcall mechanism for CIFS which contacts userspace helper |
---|
192 | | - utilities to provide server name resolution (host names to |
---|
193 | | - IP addresses) which is needed for implicit mounts of DFS junction |
---|
194 | | - points. If unsure, say Y. |
---|
| 180 | + bool "DFS feature support" |
---|
| 181 | + depends on CIFS |
---|
| 182 | + select DNS_RESOLVER |
---|
| 183 | + help |
---|
| 184 | + Distributed File System (DFS) support is used to access shares |
---|
| 185 | + transparently in an enterprise name space, even if the share |
---|
| 186 | + moves to a different server. This feature also enables |
---|
| 187 | + an upcall mechanism for CIFS which contacts userspace helper |
---|
| 188 | + utilities to provide server name resolution (host names to |
---|
| 189 | + IP addresses) which is needed in order to reconnect to |
---|
| 190 | + servers if their addresses change or for implicit mounts of |
---|
| 191 | + DFS junction points. If unsure, say Y. |
---|
195 | 192 | |
---|
196 | 193 | config CIFS_NFSD_EXPORT |
---|
197 | | - bool "Allow nfsd to export CIFS file system" |
---|
198 | | - depends on CIFS && BROKEN |
---|
199 | | - help |
---|
200 | | - Allows NFS server to export a CIFS mounted share (nfsd over cifs) |
---|
| 194 | + bool "Allow nfsd to export CIFS file system" |
---|
| 195 | + depends on CIFS && BROKEN |
---|
| 196 | + help |
---|
| 197 | + Allows NFS server to export a CIFS mounted share (nfsd over cifs) |
---|
201 | 198 | |
---|
202 | 199 | config CIFS_SMB_DIRECT |
---|
203 | | - bool "SMB Direct support (Experimental)" |
---|
| 200 | + bool "SMB Direct support" |
---|
204 | 201 | depends on CIFS=m && INFINIBAND && INFINIBAND_ADDR_TRANS || CIFS=y && INFINIBAND=y && INFINIBAND_ADDR_TRANS=y |
---|
205 | 202 | help |
---|
206 | | - Enables SMB Direct experimental support for SMB 3.0, 3.02 and 3.1.1. |
---|
| 203 | + Enables SMB Direct support for SMB 3.0, 3.02 and 3.1.1. |
---|
207 | 204 | SMB Direct allows transferring SMB packets over RDMA. If unsure, |
---|
208 | | - say N. |
---|
| 205 | + say Y. |
---|
209 | 206 | |
---|
210 | 207 | config CIFS_FSCACHE |
---|
211 | | - bool "Provide CIFS client caching support" |
---|
212 | | - depends on CIFS=m && FSCACHE || CIFS=y && FSCACHE=y |
---|
213 | | - help |
---|
214 | | - Makes CIFS FS-Cache capable. Say Y here if you want your CIFS data |
---|
215 | | - to be cached locally on disk through the general filesystem cache |
---|
216 | | - manager. If unsure, say N. |
---|
| 208 | + bool "Provide CIFS client caching support" |
---|
| 209 | + depends on CIFS=m && FSCACHE || CIFS=y && FSCACHE=y |
---|
| 210 | + help |
---|
| 211 | + Makes CIFS FS-Cache capable. Say Y here if you want your CIFS data |
---|
| 212 | + to be cached locally on disk through the general filesystem cache |
---|
| 213 | + manager. If unsure, say N. |
---|
217 | 214 | |
---|
| 215 | +config CIFS_ROOT |
---|
| 216 | + bool "SMB root file system (Experimental)" |
---|
| 217 | + depends on CIFS=y && IP_PNP |
---|
| 218 | + help |
---|
| 219 | + Enables root file system support over SMB protocol. |
---|
| 220 | + |
---|
| 221 | + Most people say N here. |
---|