2 # For a description of the syntax of this configuration file,
3 # see scripts/kbuild/config-language.txt.
6 menu "SELinux Utilities"
7 depends on BUSYBOX_CONFIG_SELINUX
9 config BUSYBOX_CONFIG_CHCON
12 depends on BUSYBOX_CONFIG_SELINUX
14 Enable support to change the security context of file.
16 config BUSYBOX_CONFIG_FEATURE_CHCON_LONG_OPTIONS
17 bool "Enable long options"
19 depends on BUSYBOX_CONFIG_CHCON && BUSYBOX_CONFIG_LONG_OPTS
21 Support long options for the chcon applet.
23 config BUSYBOX_CONFIG_GETENFORCE
26 depends on BUSYBOX_CONFIG_SELINUX
28 Enable support to get the current mode of SELinux.
30 config BUSYBOX_CONFIG_GETSEBOOL
33 depends on BUSYBOX_CONFIG_SELINUX
35 Enable support to get SELinux boolean values.
37 config BUSYBOX_CONFIG_LOAD_POLICY
40 depends on BUSYBOX_CONFIG_SELINUX
42 Enable support to load SELinux policy.
44 config BUSYBOX_CONFIG_MATCHPATHCON
47 depends on BUSYBOX_CONFIG_SELINUX
49 Enable support to get default security context of the
50 specified path from the file contexts configuration.
52 config BUSYBOX_CONFIG_RESTORECON
55 depends on BUSYBOX_CONFIG_SELINUX
57 Enable support to relabel files. The feature is almost
58 the same as setfiles, but usage is a little different.
60 config BUSYBOX_CONFIG_RUNCON
63 depends on BUSYBOX_CONFIG_SELINUX
65 Enable support to run command in speficied security context.
67 config BUSYBOX_CONFIG_FEATURE_RUNCON_LONG_OPTIONS
68 bool "Enable long options"
70 depends on BUSYBOX_CONFIG_RUNCON && BUSYBOX_CONFIG_LONG_OPTS
72 Support long options for the runcon applet.
74 config BUSYBOX_CONFIG_SELINUXENABLED
77 depends on BUSYBOX_CONFIG_SELINUX
79 Enable support for this command to be used within shell scripts
80 to determine if selinux is enabled.
82 config BUSYBOX_CONFIG_SETENFORCE
85 depends on BUSYBOX_CONFIG_SELINUX
87 Enable support to modify the mode SELinux is running in.
89 config BUSYBOX_CONFIG_SETFILES
92 depends on BUSYBOX_CONFIG_SELINUX
94 Enable support to modify to relabel files.
95 Notice: If you built libselinux with -D_FILE_OFFSET_BITS=64,
96 (It is default in libselinux's Makefile), you _must_ enable
99 config BUSYBOX_CONFIG_FEATURE_SETFILES_CHECK_OPTION
100 bool "Enable check option"
102 depends on BUSYBOX_CONFIG_SETFILES
104 Support "-c" option (check the validity of the contexts against
105 the specified binary policy) for setfiles. Requires libsepol.
107 config BUSYBOX_CONFIG_SETSEBOOL
110 depends on BUSYBOX_CONFIG_SELINUX
112 Enable support for change boolean.
113 semanage and -P option is not supported yet.
115 config BUSYBOX_CONFIG_SESTATUS
118 depends on BUSYBOX_CONFIG_SELINUX
120 Displays the status of SELinux.