| .. | .. |
|---|
| 1 | +# SPDX-License-Identifier: GPL-2.0-only |
|---|
| 1 | 2 | config SECURITY_APPARMOR |
|---|
| 2 | 3 | bool "AppArmor support" |
|---|
| 3 | 4 | depends on SECURITY && NET |
|---|
| .. | .. |
|---|
| 5 | 6 | select SECURITY_PATH |
|---|
| 6 | 7 | select SECURITYFS |
|---|
| 7 | 8 | select SECURITY_NETWORK |
|---|
| 9 | + select ZLIB_INFLATE |
|---|
| 10 | + select ZLIB_DEFLATE |
|---|
| 8 | 11 | default n |
|---|
| 9 | 12 | help |
|---|
| 10 | 13 | This enables the AppArmor security module. |
|---|
| .. | .. |
|---|
| 13 | 16 | http://apparmor.wiki.kernel.org |
|---|
| 14 | 17 | |
|---|
| 15 | 18 | If you are unsure how to answer this question, answer N. |
|---|
| 16 | | - |
|---|
| 17 | | -config SECURITY_APPARMOR_BOOTPARAM_VALUE |
|---|
| 18 | | - int "AppArmor boot parameter default value" |
|---|
| 19 | | - depends on SECURITY_APPARMOR |
|---|
| 20 | | - range 0 1 |
|---|
| 21 | | - default 1 |
|---|
| 22 | | - help |
|---|
| 23 | | - This option sets the default value for the kernel parameter |
|---|
| 24 | | - 'apparmor', which allows AppArmor to be enabled or disabled |
|---|
| 25 | | - at boot. If this option is set to 0 (zero), the AppArmor |
|---|
| 26 | | - kernel parameter will default to 0, disabling AppArmor at |
|---|
| 27 | | - boot. If this option is set to 1 (one), the AppArmor |
|---|
| 28 | | - kernel parameter will default to 1, enabling AppArmor at |
|---|
| 29 | | - boot. |
|---|
| 30 | | - |
|---|
| 31 | | - If you are unsure how to answer this question, answer 1. |
|---|
| 32 | 19 | |
|---|
| 33 | 20 | config SECURITY_APPARMOR_HASH |
|---|
| 34 | 21 | bool "Enable introspection of sha1 hashes for loaded profiles" |
|---|
| .. | .. |
|---|
| 81 | 68 | Set the default value of the apparmor.debug kernel parameter. |
|---|
| 82 | 69 | When enabled, various debug messages will be logged to |
|---|
| 83 | 70 | the kernel message buffer. |
|---|
| 71 | + |
|---|
| 72 | +config SECURITY_APPARMOR_KUNIT_TEST |
|---|
| 73 | + bool "Build KUnit tests for policy_unpack.c" if !KUNIT_ALL_TESTS |
|---|
| 74 | + depends on KUNIT=y && SECURITY_APPARMOR |
|---|
| 75 | + default KUNIT_ALL_TESTS |
|---|
| 76 | + help |
|---|
| 77 | + This builds the AppArmor KUnit tests. |
|---|
| 78 | + |
|---|
| 79 | + KUnit tests run during boot and output the results to the debug log |
|---|
| 80 | + in TAP format (https://testanything.org/). Only useful for kernel devs |
|---|
| 81 | + running KUnit test harness and are not for inclusion into a |
|---|
| 82 | + production build. |
|---|
| 83 | + |
|---|
| 84 | + For more information on KUnit and unit tests in general please refer |
|---|
| 85 | + to the KUnit documentation in Documentation/dev-tools/kunit/. |
|---|
| 86 | + |
|---|
| 87 | + If unsure, say N. |
|---|