hc
2023-12-11 d2ccde1c8e90d38cee87a1b0309ad2827f3fd30d
kernel/security/apparmor/Kconfig
....@@ -1,3 +1,4 @@
1
+# SPDX-License-Identifier: GPL-2.0-only
12 config SECURITY_APPARMOR
23 bool "AppArmor support"
34 depends on SECURITY && NET
....@@ -5,6 +6,8 @@
56 select SECURITY_PATH
67 select SECURITYFS
78 select SECURITY_NETWORK
9
+ select ZLIB_INFLATE
10
+ select ZLIB_DEFLATE
811 default n
912 help
1013 This enables the AppArmor security module.
....@@ -13,22 +16,6 @@
1316 http://apparmor.wiki.kernel.org
1417
1518 If you are unsure how to answer this question, answer N.
16
-
17
-config SECURITY_APPARMOR_BOOTPARAM_VALUE
18
- int "AppArmor boot parameter default value"
19
- depends on SECURITY_APPARMOR
20
- range 0 1
21
- default 1
22
- help
23
- This option sets the default value for the kernel parameter
24
- 'apparmor', which allows AppArmor to be enabled or disabled
25
- at boot. If this option is set to 0 (zero), the AppArmor
26
- kernel parameter will default to 0, disabling AppArmor at
27
- boot. If this option is set to 1 (one), the AppArmor
28
- kernel parameter will default to 1, enabling AppArmor at
29
- boot.
30
-
31
- If you are unsure how to answer this question, answer 1.
3219
3320 config SECURITY_APPARMOR_HASH
3421 bool "Enable introspection of sha1 hashes for loaded profiles"
....@@ -81,3 +68,20 @@
8168 Set the default value of the apparmor.debug kernel parameter.
8269 When enabled, various debug messages will be logged to
8370 the kernel message buffer.
71
+
72
+config SECURITY_APPARMOR_KUNIT_TEST
73
+ bool "Build KUnit tests for policy_unpack.c" if !KUNIT_ALL_TESTS
74
+ depends on KUNIT=y && SECURITY_APPARMOR
75
+ default KUNIT_ALL_TESTS
76
+ help
77
+ This builds the AppArmor KUnit tests.
78
+
79
+ KUnit tests run during boot and output the results to the debug log
80
+ in TAP format (https://testanything.org/). Only useful for kernel devs
81
+ running KUnit test harness and are not for inclusion into a
82
+ production build.
83
+
84
+ For more information on KUnit and unit tests in general please refer
85
+ to the KUnit documentation in Documentation/dev-tools/kunit/.
86
+
87
+ If unsure, say N.