| .. | .. | 
|---|
 | 1 | +# SPDX-License-Identifier: GPL-2.0-only  | 
|---|
| 1 | 2 |  config CIFS | 
|---|
| 2 | 3 |  	tristate "SMB3 and CIFS support (advanced network filesystem)" | 
|---|
| 3 | 4 |  	depends on INET | 
|---|
| .. | .. | 
|---|
| 9 | 10 |  	select CRYPTO_SHA512 | 
|---|
| 10 | 11 |  	select CRYPTO_CMAC | 
|---|
| 11 | 12 |  	select CRYPTO_HMAC | 
|---|
| 12 |  | -	select CRYPTO_ARC4  | 
|---|
 | 13 | +	select CRYPTO_LIB_ARC4  | 
|---|
| 13 | 14 |  	select CRYPTO_AEAD2 | 
|---|
| 14 | 15 |  	select CRYPTO_CCM | 
|---|
 | 16 | +	select CRYPTO_GCM  | 
|---|
| 15 | 17 |  	select CRYPTO_ECB | 
|---|
| 16 | 18 |  	select CRYPTO_AES | 
|---|
| 17 |  | -	select CRYPTO_DES  | 
|---|
 | 19 | +	select CRYPTO_LIB_DES  | 
|---|
 | 20 | +	select KEYS  | 
|---|
| 18 | 21 |  	help | 
|---|
| 19 | 22 |  	  This is the client VFS module for the SMB3 family of NAS protocols, | 
|---|
| 20 | 23 |  	  (including support for the most recent, most secure dialect SMB3.1.1) | 
|---|
| .. | .. | 
|---|
| 108 | 111 |   | 
|---|
| 109 | 112 |  config CIFS_UPCALL | 
|---|
| 110 | 113 |  	bool "Kerberos/SPNEGO advanced session setup" | 
|---|
| 111 |  | -	depends on CIFS && KEYS  | 
|---|
 | 114 | +	depends on CIFS  | 
|---|
| 112 | 115 |  	select DNS_RESOLVER | 
|---|
| 113 | 116 |  	help | 
|---|
| 114 | 117 |  	  Enables an upcall mechanism for CIFS which accesses userspace helper | 
|---|
| .. | .. | 
|---|
| 117 | 120 |  	  secure Kerberos authentication is required). If unsure, say Y. | 
|---|
| 118 | 121 |   | 
|---|
| 119 | 122 |  config CIFS_XATTR | 
|---|
| 120 |  | -        bool "CIFS extended attributes"  | 
|---|
| 121 |  | -        depends on CIFS  | 
|---|
| 122 |  | -        help  | 
|---|
| 123 |  | -          Extended attributes are name:value pairs associated with inodes by  | 
|---|
| 124 |  | -          the kernel or by users (see the attr(5) manual page for details).  | 
|---|
| 125 |  | -          CIFS maps the name of extended attributes beginning with the user  | 
|---|
| 126 |  | -          namespace prefix to SMB/CIFS EAs.  EAs are stored on Windows  | 
|---|
| 127 |  | -          servers without the user namespace prefix, but their names are  | 
|---|
| 128 |  | -          seen by Linux cifs clients prefaced by the user namespace prefix.  | 
|---|
| 129 |  | -          The system namespace (used by some filesystems to store ACLs) is  | 
|---|
| 130 |  | -          not supported at this time.  | 
|---|
 | 123 | +	bool "CIFS extended attributes"  | 
|---|
 | 124 | +	depends on CIFS  | 
|---|
 | 125 | +	help  | 
|---|
 | 126 | +	  Extended attributes are name:value pairs associated with inodes by  | 
|---|
 | 127 | +	  the kernel or by users (see the attr(5) manual page for details).  | 
|---|
 | 128 | +	  CIFS maps the name of extended attributes beginning with the user  | 
|---|
 | 129 | +	  namespace prefix to SMB/CIFS EAs.  EAs are stored on Windows  | 
|---|
 | 130 | +	  servers without the user namespace prefix, but their names are  | 
|---|
 | 131 | +	  seen by Linux cifs clients prefaced by the user namespace prefix.  | 
|---|
 | 132 | +	  The system namespace (used by some filesystems to store ACLs) is  | 
|---|
 | 133 | +	  not supported at this time.  | 
|---|
| 131 | 134 |   | 
|---|
| 132 |  | -          If unsure, say Y.  | 
|---|
 | 135 | +	  If unsure, say Y.  | 
|---|
| 133 | 136 |   | 
|---|
| 134 | 137 |  config CIFS_POSIX | 
|---|
| 135 |  | -        bool "CIFS POSIX Extensions"  | 
|---|
| 136 |  | -        depends on CIFS && CIFS_ALLOW_INSECURE_LEGACY && CIFS_XATTR  | 
|---|
| 137 |  | -        help  | 
|---|
| 138 |  | -          Enabling this option will cause the cifs client to attempt to  | 
|---|
 | 138 | +	bool "CIFS POSIX Extensions"  | 
|---|
 | 139 | +	depends on CIFS && CIFS_ALLOW_INSECURE_LEGACY && CIFS_XATTR  | 
|---|
 | 140 | +	help  | 
|---|
 | 141 | +	  Enabling this option will cause the cifs client to attempt to  | 
|---|
| 139 | 142 |  	  negotiate a newer dialect with servers, such as Samba 3.0.5 | 
|---|
| 140 | 143 |  	  or later, that optionally can handle more POSIX like (rather | 
|---|
| 141 | 144 |  	  than Windows like) file behavior.  It also enables | 
|---|
| .. | .. | 
|---|
| 143 | 146 |  	  (such as Samba 3.10 and later) which can negotiate | 
|---|
| 144 | 147 |  	  CIFS POSIX ACL support.  If unsure, say N. | 
|---|
| 145 | 148 |   | 
|---|
| 146 |  | -config CIFS_ACL  | 
|---|
| 147 |  | -	  bool "Provide CIFS ACL support"  | 
|---|
| 148 |  | -	  depends on CIFS_XATTR && KEYS  | 
|---|
| 149 |  | -	  help  | 
|---|
| 150 |  | -	    Allows fetching CIFS/NTFS ACL from the server.  The DACL blob  | 
|---|
| 151 |  | -	    is handed over to the application/caller.  See the man  | 
|---|
| 152 |  | -	    page for getcifsacl for more information.  If unsure, say Y.  | 
|---|
| 153 |  | -  | 
|---|
| 154 | 149 |  config CIFS_DEBUG | 
|---|
| 155 | 150 |  	bool "Enable CIFS debugging routines" | 
|---|
| 156 | 151 |  	default y | 
|---|
| 157 | 152 |  	depends on CIFS | 
|---|
| 158 | 153 |  	help | 
|---|
| 159 |  | -	   Enabling this option adds helpful debugging messages to  | 
|---|
| 160 |  | -	   the cifs code which increases the size of the cifs module.  | 
|---|
| 161 |  | -	   If unsure, say Y.  | 
|---|
 | 154 | +	  Enabling this option adds helpful debugging messages to  | 
|---|
 | 155 | +	  the cifs code which increases the size of the cifs module.  | 
|---|
 | 156 | +	  If unsure, say Y.  | 
|---|
 | 157 | +  | 
|---|
| 162 | 158 |  config CIFS_DEBUG2 | 
|---|
| 163 | 159 |  	bool "Enable additional CIFS debugging routines" | 
|---|
| 164 | 160 |  	depends on CIFS_DEBUG | 
|---|
| 165 | 161 |  	help | 
|---|
| 166 |  | -	   Enabling this option adds a few more debugging routines  | 
|---|
| 167 |  | -	   to the cifs code which slightly increases the size of  | 
|---|
| 168 |  | -	   the cifs module and can cause additional logging of debug  | 
|---|
| 169 |  | -	   messages in some error paths, slowing performance. This  | 
|---|
| 170 |  | -	   option can be turned off unless you are debugging  | 
|---|
| 171 |  | -	   cifs problems.  If unsure, say N.  | 
|---|
 | 162 | +	  Enabling this option adds a few more debugging routines  | 
|---|
 | 163 | +	  to the cifs code which slightly increases the size of  | 
|---|
 | 164 | +	  the cifs module and can cause additional logging of debug  | 
|---|
 | 165 | +	  messages in some error paths, slowing performance. This  | 
|---|
 | 166 | +	  option can be turned off unless you are debugging  | 
|---|
 | 167 | +	  cifs problems.  If unsure, say N.  | 
|---|
| 172 | 168 |   | 
|---|
| 173 | 169 |  config CIFS_DEBUG_DUMP_KEYS | 
|---|
| 174 | 170 |  	bool "Dump encryption keys for offline decryption (Unsafe)" | 
|---|
| 175 | 171 |  	depends on CIFS_DEBUG | 
|---|
| 176 | 172 |  	help | 
|---|
| 177 |  | -	   Enabling this will dump the encryption and decryption keys  | 
|---|
| 178 |  | -	   used to communicate on an encrypted share connection on the  | 
|---|
| 179 |  | -	   console. This allows Wireshark to decrypt and dissect  | 
|---|
| 180 |  | -	   encrypted network captures. Enable this carefully.  | 
|---|
| 181 |  | -	   If unsure, say N.  | 
|---|
 | 173 | +	  Enabling this will dump the encryption and decryption keys  | 
|---|
 | 174 | +	  used to communicate on an encrypted share connection on the  | 
|---|
 | 175 | +	  console. This allows Wireshark to decrypt and dissect  | 
|---|
 | 176 | +	  encrypted network captures. Enable this carefully.  | 
|---|
 | 177 | +	  If unsure, say N.  | 
|---|
| 182 | 178 |   | 
|---|
| 183 | 179 |  config CIFS_DFS_UPCALL | 
|---|
| 184 |  | -	  bool "DFS feature support"  | 
|---|
| 185 |  | -	  depends on CIFS && KEYS  | 
|---|
| 186 |  | -	  select DNS_RESOLVER  | 
|---|
| 187 |  | -	  help  | 
|---|
| 188 |  | -	    Distributed File System (DFS) support is used to access shares  | 
|---|
| 189 |  | -	    transparently in an enterprise name space, even if the share  | 
|---|
| 190 |  | -	    moves to a different server.  This feature also enables  | 
|---|
| 191 |  | -	    an upcall mechanism for CIFS which contacts userspace helper  | 
|---|
| 192 |  | -	    utilities to provide server name resolution (host names to  | 
|---|
| 193 |  | -	    IP addresses) which is needed for implicit mounts of DFS junction  | 
|---|
| 194 |  | -	    points. If unsure, say Y.  | 
|---|
 | 180 | +	bool "DFS feature support"  | 
|---|
 | 181 | +	depends on CIFS  | 
|---|
 | 182 | +	select DNS_RESOLVER  | 
|---|
 | 183 | +	help  | 
|---|
 | 184 | +	  Distributed File System (DFS) support is used to access shares  | 
|---|
 | 185 | +	  transparently in an enterprise name space, even if the share  | 
|---|
 | 186 | +	  moves to a different server.  This feature also enables  | 
|---|
 | 187 | +	  an upcall mechanism for CIFS which contacts userspace helper  | 
|---|
 | 188 | +	  utilities to provide server name resolution (host names to  | 
|---|
 | 189 | +	  IP addresses) which is needed in order to reconnect to  | 
|---|
 | 190 | +	  servers if their addresses change or for implicit mounts of  | 
|---|
 | 191 | +	  DFS junction points. If unsure, say Y.  | 
|---|
| 195 | 192 |   | 
|---|
| 196 | 193 |  config CIFS_NFSD_EXPORT | 
|---|
| 197 |  | -	  bool "Allow nfsd to export CIFS file system"  | 
|---|
| 198 |  | -	  depends on CIFS && BROKEN  | 
|---|
| 199 |  | -	  help  | 
|---|
| 200 |  | -	   Allows NFS server to export a CIFS mounted share (nfsd over cifs)  | 
|---|
 | 194 | +	bool "Allow nfsd to export CIFS file system"  | 
|---|
 | 195 | +	depends on CIFS && BROKEN  | 
|---|
 | 196 | +	help  | 
|---|
 | 197 | +	  Allows NFS server to export a CIFS mounted share (nfsd over cifs)  | 
|---|
| 201 | 198 |   | 
|---|
| 202 | 199 |  config CIFS_SMB_DIRECT | 
|---|
| 203 |  | -	bool "SMB Direct support (Experimental)"  | 
|---|
 | 200 | +	bool "SMB Direct support"  | 
|---|
| 204 | 201 |  	depends on CIFS=m && INFINIBAND && INFINIBAND_ADDR_TRANS || CIFS=y && INFINIBAND=y && INFINIBAND_ADDR_TRANS=y | 
|---|
| 205 | 202 |  	help | 
|---|
| 206 |  | -	  Enables SMB Direct experimental support for SMB 3.0, 3.02 and 3.1.1.  | 
|---|
 | 203 | +	  Enables SMB Direct support for SMB 3.0, 3.02 and 3.1.1.  | 
|---|
| 207 | 204 |  	  SMB Direct allows transferring SMB packets over RDMA. If unsure, | 
|---|
| 208 |  | -	  say N.  | 
|---|
 | 205 | +	  say Y.  | 
|---|
| 209 | 206 |   | 
|---|
| 210 | 207 |  config CIFS_FSCACHE | 
|---|
| 211 |  | -	  bool "Provide CIFS client caching support"  | 
|---|
| 212 |  | -	  depends on CIFS=m && FSCACHE || CIFS=y && FSCACHE=y  | 
|---|
| 213 |  | -	  help  | 
|---|
| 214 |  | -	    Makes CIFS FS-Cache capable. Say Y here if you want your CIFS data  | 
|---|
| 215 |  | -	    to be cached locally on disk through the general filesystem cache  | 
|---|
| 216 |  | -	    manager. If unsure, say N.  | 
|---|
 | 208 | +	bool "Provide CIFS client caching support"  | 
|---|
 | 209 | +	depends on CIFS=m && FSCACHE || CIFS=y && FSCACHE=y  | 
|---|
 | 210 | +	help  | 
|---|
 | 211 | +	  Makes CIFS FS-Cache capable. Say Y here if you want your CIFS data  | 
|---|
 | 212 | +	  to be cached locally on disk through the general filesystem cache  | 
|---|
 | 213 | +	  manager. If unsure, say N.  | 
|---|
| 217 | 214 |   | 
|---|
 | 215 | +config CIFS_ROOT  | 
|---|
 | 216 | +	bool "SMB root file system (Experimental)"  | 
|---|
 | 217 | +	depends on CIFS=y && IP_PNP  | 
|---|
 | 218 | +	help  | 
|---|
 | 219 | +	  Enables root file system support over SMB protocol.  | 
|---|
 | 220 | +  | 
|---|
 | 221 | +	  Most people say N here.  | 
|---|