| .. | .. | 
|---|
 | 1 | +# SPDX-License-Identifier: GPL-2.0-only  | 
|---|
| 1 | 2 |  config SUNRPC | 
|---|
| 2 | 3 |  	tristate | 
|---|
| 3 | 4 |  	depends on MULTIUSER | 
|---|
| .. | .. | 
|---|
| 20 | 21 |  	depends on SUNRPC && CRYPTO | 
|---|
| 21 | 22 |  	depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS | 
|---|
| 22 | 23 |  	depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES | 
|---|
| 23 |  | -	depends on CRYPTO_ARC4  | 
|---|
| 24 | 24 |  	default y | 
|---|
| 25 | 25 |  	select SUNRPC_GSS | 
|---|
| 26 | 26 |  	help | 
|---|
| .. | .. | 
|---|
| 34 | 34 |   | 
|---|
| 35 | 35 |  	  If unsure, say Y. | 
|---|
| 36 | 36 |   | 
|---|
 | 37 | +config SUNRPC_DISABLE_INSECURE_ENCTYPES  | 
|---|
 | 38 | +	bool "Secure RPC: Disable insecure Kerberos encryption types"  | 
|---|
 | 39 | +	depends on RPCSEC_GSS_KRB5  | 
|---|
 | 40 | +	default n  | 
|---|
 | 41 | +	help  | 
|---|
 | 42 | +	  Choose Y here to disable the use of deprecated encryption types  | 
|---|
 | 43 | +	  with the Kerberos version 5 GSS-API mechanism (RFC 1964). The  | 
|---|
 | 44 | +	  deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC,  | 
|---|
 | 45 | +	  and DES-CBC-MD4. These types were deprecated by RFC 6649 because  | 
|---|
 | 46 | +	  they were found to be insecure.  | 
|---|
 | 47 | +  | 
|---|
 | 48 | +	  N is the default because many sites have deployed KDCs and  | 
|---|
 | 49 | +	  keytabs that contain only these deprecated encryption types.  | 
|---|
 | 50 | +	  Choosing Y prevents the use of known-insecure encryption types  | 
|---|
 | 51 | +	  but might result in compatibility problems.  | 
|---|
 | 52 | +  | 
|---|
| 37 | 53 |  config SUNRPC_DEBUG | 
|---|
| 38 | 54 |  	bool "RPC: Enable dprintk debugging" | 
|---|
| 39 | 55 |  	depends on SUNRPC && SYSCTL | 
|---|