| .. | .. |
|---|
| 1 | +# SPDX-License-Identifier: GPL-2.0-only |
|---|
| 1 | 2 | config SUNRPC |
|---|
| 2 | 3 | tristate |
|---|
| 3 | 4 | depends on MULTIUSER |
|---|
| .. | .. |
|---|
| 20 | 21 | depends on SUNRPC && CRYPTO |
|---|
| 21 | 22 | depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS |
|---|
| 22 | 23 | depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES |
|---|
| 23 | | - depends on CRYPTO_ARC4 |
|---|
| 24 | 24 | default y |
|---|
| 25 | 25 | select SUNRPC_GSS |
|---|
| 26 | 26 | help |
|---|
| .. | .. |
|---|
| 34 | 34 | |
|---|
| 35 | 35 | If unsure, say Y. |
|---|
| 36 | 36 | |
|---|
| 37 | +config SUNRPC_DISABLE_INSECURE_ENCTYPES |
|---|
| 38 | + bool "Secure RPC: Disable insecure Kerberos encryption types" |
|---|
| 39 | + depends on RPCSEC_GSS_KRB5 |
|---|
| 40 | + default n |
|---|
| 41 | + help |
|---|
| 42 | + Choose Y here to disable the use of deprecated encryption types |
|---|
| 43 | + with the Kerberos version 5 GSS-API mechanism (RFC 1964). The |
|---|
| 44 | + deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC, |
|---|
| 45 | + and DES-CBC-MD4. These types were deprecated by RFC 6649 because |
|---|
| 46 | + they were found to be insecure. |
|---|
| 47 | + |
|---|
| 48 | + N is the default because many sites have deployed KDCs and |
|---|
| 49 | + keytabs that contain only these deprecated encryption types. |
|---|
| 50 | + Choosing Y prevents the use of known-insecure encryption types |
|---|
| 51 | + but might result in compatibility problems. |
|---|
| 52 | + |
|---|
| 37 | 53 | config SUNRPC_DEBUG |
|---|
| 38 | 54 | bool "RPC: Enable dprintk debugging" |
|---|
| 39 | 55 | depends on SUNRPC && SYSCTL |
|---|