| .. | .. |
|---|
| 1 | +# SPDX-License-Identifier: GPL-2.0-only |
|---|
| 1 | 2 | config CIFS |
|---|
| 2 | 3 | tristate "SMB3 and CIFS support (advanced network filesystem)" |
|---|
| 3 | 4 | depends on INET |
|---|
| .. | .. |
|---|
| 9 | 10 | select CRYPTO_SHA512 |
|---|
| 10 | 11 | select CRYPTO_CMAC |
|---|
| 11 | 12 | select CRYPTO_HMAC |
|---|
| 12 | | - select CRYPTO_ARC4 |
|---|
| 13 | + select CRYPTO_LIB_ARC4 |
|---|
| 13 | 14 | select CRYPTO_AEAD2 |
|---|
| 14 | 15 | select CRYPTO_CCM |
|---|
| 16 | + select CRYPTO_GCM |
|---|
| 15 | 17 | select CRYPTO_ECB |
|---|
| 16 | 18 | select CRYPTO_AES |
|---|
| 17 | | - select CRYPTO_DES |
|---|
| 19 | + select CRYPTO_LIB_DES |
|---|
| 20 | + select KEYS |
|---|
| 18 | 21 | help |
|---|
| 19 | 22 | This is the client VFS module for the SMB3 family of NAS protocols, |
|---|
| 20 | 23 | (including support for the most recent, most secure dialect SMB3.1.1) |
|---|
| .. | .. |
|---|
| 108 | 111 | |
|---|
| 109 | 112 | config CIFS_UPCALL |
|---|
| 110 | 113 | bool "Kerberos/SPNEGO advanced session setup" |
|---|
| 111 | | - depends on CIFS && KEYS |
|---|
| 114 | + depends on CIFS |
|---|
| 112 | 115 | select DNS_RESOLVER |
|---|
| 113 | 116 | help |
|---|
| 114 | 117 | Enables an upcall mechanism for CIFS which accesses userspace helper |
|---|
| .. | .. |
|---|
| 117 | 120 | secure Kerberos authentication is required). If unsure, say Y. |
|---|
| 118 | 121 | |
|---|
| 119 | 122 | config CIFS_XATTR |
|---|
| 120 | | - bool "CIFS extended attributes" |
|---|
| 121 | | - depends on CIFS |
|---|
| 122 | | - help |
|---|
| 123 | | - Extended attributes are name:value pairs associated with inodes by |
|---|
| 124 | | - the kernel or by users (see the attr(5) manual page for details). |
|---|
| 125 | | - CIFS maps the name of extended attributes beginning with the user |
|---|
| 126 | | - namespace prefix to SMB/CIFS EAs. EAs are stored on Windows |
|---|
| 127 | | - servers without the user namespace prefix, but their names are |
|---|
| 128 | | - seen by Linux cifs clients prefaced by the user namespace prefix. |
|---|
| 129 | | - The system namespace (used by some filesystems to store ACLs) is |
|---|
| 130 | | - not supported at this time. |
|---|
| 123 | + bool "CIFS extended attributes" |
|---|
| 124 | + depends on CIFS |
|---|
| 125 | + help |
|---|
| 126 | + Extended attributes are name:value pairs associated with inodes by |
|---|
| 127 | + the kernel or by users (see the attr(5) manual page for details). |
|---|
| 128 | + CIFS maps the name of extended attributes beginning with the user |
|---|
| 129 | + namespace prefix to SMB/CIFS EAs. EAs are stored on Windows |
|---|
| 130 | + servers without the user namespace prefix, but their names are |
|---|
| 131 | + seen by Linux cifs clients prefaced by the user namespace prefix. |
|---|
| 132 | + The system namespace (used by some filesystems to store ACLs) is |
|---|
| 133 | + not supported at this time. |
|---|
| 131 | 134 | |
|---|
| 132 | | - If unsure, say Y. |
|---|
| 135 | + If unsure, say Y. |
|---|
| 133 | 136 | |
|---|
| 134 | 137 | config CIFS_POSIX |
|---|
| 135 | | - bool "CIFS POSIX Extensions" |
|---|
| 136 | | - depends on CIFS && CIFS_ALLOW_INSECURE_LEGACY && CIFS_XATTR |
|---|
| 137 | | - help |
|---|
| 138 | | - Enabling this option will cause the cifs client to attempt to |
|---|
| 138 | + bool "CIFS POSIX Extensions" |
|---|
| 139 | + depends on CIFS && CIFS_ALLOW_INSECURE_LEGACY && CIFS_XATTR |
|---|
| 140 | + help |
|---|
| 141 | + Enabling this option will cause the cifs client to attempt to |
|---|
| 139 | 142 | negotiate a newer dialect with servers, such as Samba 3.0.5 |
|---|
| 140 | 143 | or later, that optionally can handle more POSIX like (rather |
|---|
| 141 | 144 | than Windows like) file behavior. It also enables |
|---|
| .. | .. |
|---|
| 143 | 146 | (such as Samba 3.10 and later) which can negotiate |
|---|
| 144 | 147 | CIFS POSIX ACL support. If unsure, say N. |
|---|
| 145 | 148 | |
|---|
| 146 | | -config CIFS_ACL |
|---|
| 147 | | - bool "Provide CIFS ACL support" |
|---|
| 148 | | - depends on CIFS_XATTR && KEYS |
|---|
| 149 | | - help |
|---|
| 150 | | - Allows fetching CIFS/NTFS ACL from the server. The DACL blob |
|---|
| 151 | | - is handed over to the application/caller. See the man |
|---|
| 152 | | - page for getcifsacl for more information. If unsure, say Y. |
|---|
| 153 | | - |
|---|
| 154 | 149 | config CIFS_DEBUG |
|---|
| 155 | 150 | bool "Enable CIFS debugging routines" |
|---|
| 156 | 151 | default y |
|---|
| 157 | 152 | depends on CIFS |
|---|
| 158 | 153 | help |
|---|
| 159 | | - Enabling this option adds helpful debugging messages to |
|---|
| 160 | | - the cifs code which increases the size of the cifs module. |
|---|
| 161 | | - If unsure, say Y. |
|---|
| 154 | + Enabling this option adds helpful debugging messages to |
|---|
| 155 | + the cifs code which increases the size of the cifs module. |
|---|
| 156 | + If unsure, say Y. |
|---|
| 157 | + |
|---|
| 162 | 158 | config CIFS_DEBUG2 |
|---|
| 163 | 159 | bool "Enable additional CIFS debugging routines" |
|---|
| 164 | 160 | depends on CIFS_DEBUG |
|---|
| 165 | 161 | help |
|---|
| 166 | | - Enabling this option adds a few more debugging routines |
|---|
| 167 | | - to the cifs code which slightly increases the size of |
|---|
| 168 | | - the cifs module and can cause additional logging of debug |
|---|
| 169 | | - messages in some error paths, slowing performance. This |
|---|
| 170 | | - option can be turned off unless you are debugging |
|---|
| 171 | | - cifs problems. If unsure, say N. |
|---|
| 162 | + Enabling this option adds a few more debugging routines |
|---|
| 163 | + to the cifs code which slightly increases the size of |
|---|
| 164 | + the cifs module and can cause additional logging of debug |
|---|
| 165 | + messages in some error paths, slowing performance. This |
|---|
| 166 | + option can be turned off unless you are debugging |
|---|
| 167 | + cifs problems. If unsure, say N. |
|---|
| 172 | 168 | |
|---|
| 173 | 169 | config CIFS_DEBUG_DUMP_KEYS |
|---|
| 174 | 170 | bool "Dump encryption keys for offline decryption (Unsafe)" |
|---|
| 175 | 171 | depends on CIFS_DEBUG |
|---|
| 176 | 172 | help |
|---|
| 177 | | - Enabling this will dump the encryption and decryption keys |
|---|
| 178 | | - used to communicate on an encrypted share connection on the |
|---|
| 179 | | - console. This allows Wireshark to decrypt and dissect |
|---|
| 180 | | - encrypted network captures. Enable this carefully. |
|---|
| 181 | | - If unsure, say N. |
|---|
| 173 | + Enabling this will dump the encryption and decryption keys |
|---|
| 174 | + used to communicate on an encrypted share connection on the |
|---|
| 175 | + console. This allows Wireshark to decrypt and dissect |
|---|
| 176 | + encrypted network captures. Enable this carefully. |
|---|
| 177 | + If unsure, say N. |
|---|
| 182 | 178 | |
|---|
| 183 | 179 | config CIFS_DFS_UPCALL |
|---|
| 184 | | - bool "DFS feature support" |
|---|
| 185 | | - depends on CIFS && KEYS |
|---|
| 186 | | - select DNS_RESOLVER |
|---|
| 187 | | - help |
|---|
| 188 | | - Distributed File System (DFS) support is used to access shares |
|---|
| 189 | | - transparently in an enterprise name space, even if the share |
|---|
| 190 | | - moves to a different server. This feature also enables |
|---|
| 191 | | - an upcall mechanism for CIFS which contacts userspace helper |
|---|
| 192 | | - utilities to provide server name resolution (host names to |
|---|
| 193 | | - IP addresses) which is needed for implicit mounts of DFS junction |
|---|
| 194 | | - points. If unsure, say Y. |
|---|
| 180 | + bool "DFS feature support" |
|---|
| 181 | + depends on CIFS |
|---|
| 182 | + select DNS_RESOLVER |
|---|
| 183 | + help |
|---|
| 184 | + Distributed File System (DFS) support is used to access shares |
|---|
| 185 | + transparently in an enterprise name space, even if the share |
|---|
| 186 | + moves to a different server. This feature also enables |
|---|
| 187 | + an upcall mechanism for CIFS which contacts userspace helper |
|---|
| 188 | + utilities to provide server name resolution (host names to |
|---|
| 189 | + IP addresses) which is needed in order to reconnect to |
|---|
| 190 | + servers if their addresses change or for implicit mounts of |
|---|
| 191 | + DFS junction points. If unsure, say Y. |
|---|
| 195 | 192 | |
|---|
| 196 | 193 | config CIFS_NFSD_EXPORT |
|---|
| 197 | | - bool "Allow nfsd to export CIFS file system" |
|---|
| 198 | | - depends on CIFS && BROKEN |
|---|
| 199 | | - help |
|---|
| 200 | | - Allows NFS server to export a CIFS mounted share (nfsd over cifs) |
|---|
| 194 | + bool "Allow nfsd to export CIFS file system" |
|---|
| 195 | + depends on CIFS && BROKEN |
|---|
| 196 | + help |
|---|
| 197 | + Allows NFS server to export a CIFS mounted share (nfsd over cifs) |
|---|
| 201 | 198 | |
|---|
| 202 | 199 | config CIFS_SMB_DIRECT |
|---|
| 203 | | - bool "SMB Direct support (Experimental)" |
|---|
| 200 | + bool "SMB Direct support" |
|---|
| 204 | 201 | depends on CIFS=m && INFINIBAND && INFINIBAND_ADDR_TRANS || CIFS=y && INFINIBAND=y && INFINIBAND_ADDR_TRANS=y |
|---|
| 205 | 202 | help |
|---|
| 206 | | - Enables SMB Direct experimental support for SMB 3.0, 3.02 and 3.1.1. |
|---|
| 203 | + Enables SMB Direct support for SMB 3.0, 3.02 and 3.1.1. |
|---|
| 207 | 204 | SMB Direct allows transferring SMB packets over RDMA. If unsure, |
|---|
| 208 | | - say N. |
|---|
| 205 | + say Y. |
|---|
| 209 | 206 | |
|---|
| 210 | 207 | config CIFS_FSCACHE |
|---|
| 211 | | - bool "Provide CIFS client caching support" |
|---|
| 212 | | - depends on CIFS=m && FSCACHE || CIFS=y && FSCACHE=y |
|---|
| 213 | | - help |
|---|
| 214 | | - Makes CIFS FS-Cache capable. Say Y here if you want your CIFS data |
|---|
| 215 | | - to be cached locally on disk through the general filesystem cache |
|---|
| 216 | | - manager. If unsure, say N. |
|---|
| 208 | + bool "Provide CIFS client caching support" |
|---|
| 209 | + depends on CIFS=m && FSCACHE || CIFS=y && FSCACHE=y |
|---|
| 210 | + help |
|---|
| 211 | + Makes CIFS FS-Cache capable. Say Y here if you want your CIFS data |
|---|
| 212 | + to be cached locally on disk through the general filesystem cache |
|---|
| 213 | + manager. If unsure, say N. |
|---|
| 217 | 214 | |
|---|
| 215 | +config CIFS_ROOT |
|---|
| 216 | + bool "SMB root file system (Experimental)" |
|---|
| 217 | + depends on CIFS=y && IP_PNP |
|---|
| 218 | + help |
|---|
| 219 | + Enables root file system support over SMB protocol. |
|---|
| 220 | + |
|---|
| 221 | + Most people say N here. |
|---|