.. | .. |
---|
| 1 | +# SPDX-License-Identifier: GPL-2.0-only |
---|
1 | 2 | config SECURITY_APPARMOR |
---|
2 | 3 | bool "AppArmor support" |
---|
3 | 4 | depends on SECURITY && NET |
---|
.. | .. |
---|
5 | 6 | select SECURITY_PATH |
---|
6 | 7 | select SECURITYFS |
---|
7 | 8 | select SECURITY_NETWORK |
---|
| 9 | + select ZLIB_INFLATE |
---|
| 10 | + select ZLIB_DEFLATE |
---|
8 | 11 | default n |
---|
9 | 12 | help |
---|
10 | 13 | This enables the AppArmor security module. |
---|
.. | .. |
---|
13 | 16 | http://apparmor.wiki.kernel.org |
---|
14 | 17 | |
---|
15 | 18 | If you are unsure how to answer this question, answer N. |
---|
16 | | - |
---|
17 | | -config SECURITY_APPARMOR_BOOTPARAM_VALUE |
---|
18 | | - int "AppArmor boot parameter default value" |
---|
19 | | - depends on SECURITY_APPARMOR |
---|
20 | | - range 0 1 |
---|
21 | | - default 1 |
---|
22 | | - help |
---|
23 | | - This option sets the default value for the kernel parameter |
---|
24 | | - 'apparmor', which allows AppArmor to be enabled or disabled |
---|
25 | | - at boot. If this option is set to 0 (zero), the AppArmor |
---|
26 | | - kernel parameter will default to 0, disabling AppArmor at |
---|
27 | | - boot. If this option is set to 1 (one), the AppArmor |
---|
28 | | - kernel parameter will default to 1, enabling AppArmor at |
---|
29 | | - boot. |
---|
30 | | - |
---|
31 | | - If you are unsure how to answer this question, answer 1. |
---|
32 | 19 | |
---|
33 | 20 | config SECURITY_APPARMOR_HASH |
---|
34 | 21 | bool "Enable introspection of sha1 hashes for loaded profiles" |
---|
.. | .. |
---|
81 | 68 | Set the default value of the apparmor.debug kernel parameter. |
---|
82 | 69 | When enabled, various debug messages will be logged to |
---|
83 | 70 | the kernel message buffer. |
---|
| 71 | + |
---|
| 72 | +config SECURITY_APPARMOR_KUNIT_TEST |
---|
| 73 | + bool "Build KUnit tests for policy_unpack.c" if !KUNIT_ALL_TESTS |
---|
| 74 | + depends on KUNIT=y && SECURITY_APPARMOR |
---|
| 75 | + default KUNIT_ALL_TESTS |
---|
| 76 | + help |
---|
| 77 | + This builds the AppArmor KUnit tests. |
---|
| 78 | + |
---|
| 79 | + KUnit tests run during boot and output the results to the debug log |
---|
| 80 | + in TAP format (https://testanything.org/). Only useful for kernel devs |
---|
| 81 | + running KUnit test harness and are not for inclusion into a |
---|
| 82 | + production build. |
---|
| 83 | + |
---|
| 84 | + For more information on KUnit and unit tests in general please refer |
---|
| 85 | + to the KUnit documentation in Documentation/dev-tools/kunit/. |
---|
| 86 | + |
---|
| 87 | + If unsure, say N. |
---|