package/busybox/config/selinux/Config.in

   1 #
   2 # For a description of the syntax of this configuration file,
   3 # see scripts/kbuild/config-language.txt.
   4 #
   5
   6 menu "Selinux Utilities"
   7         depends on BUSYBOX_CONFIG_SELINUX
   8
   9 config BUSYBOX_CONFIG_CHCON
  10         bool "chcon"
  11         default n
  12         depends on BUSYBOX_CONFIG_SELINUX
  13         help
  14           Enable support to change the security context of file.
  15
  16 config BUSYBOX_CONFIG_FEATURE_CHCON_LONG_OPTIONS
  17         bool "Enable long options"
  18         default n
  19         depends on BUSYBOX_CONFIG_CHCON && BUSYBOX_CONFIG_GETOPT_LONG
  20         help
  21           Support long options for the chcon applet.
  22
  23 config BUSYBOX_CONFIG_GETENFORCE
  24         bool "getenforce"
  25         default n
  26         depends on BUSYBOX_CONFIG_SELINUX
  27         help
  28           Enable support to get the current mode of SELinux.
  29
  30 config BUSYBOX_CONFIG_GETSEBOOL
  31         bool "getsebool"
  32         default n
  33         depends on BUSYBOX_CONFIG_SELINUX
  34         help
  35           Enable support to get SELinux boolean values.
  36
  37 config BUSYBOX_CONFIG_LOAD_POLICY
  38         bool "load_policy"
  39         default n
  40         depends on BUSYBOX_CONFIG_SELINUX
  41         help
  42           Enable support to load SELinux policy.
  43
  44 config BUSYBOX_CONFIG_MATCHPATHCON
  45         bool "matchpathcon"
  46         default n
  47         depends on BUSYBOX_CONFIG_SELINUX
  48         help
  49           Enable support to get default security context of the
  50           specified path from the file contexts configuration.
  51
  52 config BUSYBOX_CONFIG_RESTORECON
  53         bool "restorecon"
  54         default n
  55         depends on BUSYBOX_CONFIG_SELINUX
  56         help
  57           Enable support to relabel files. The feature is almost
  58           the same as setfiles, but usage is a little different.
  59
  60 config BUSYBOX_CONFIG_RUNCON
  61         bool "runcon"
  62         default n
  63         depends on BUSYBOX_CONFIG_SELINUX
  64         help
  65           Enable support to run command in speficied security context.
  66
  67 config BUSYBOX_CONFIG_FEATURE_RUNCON_LONG_OPTIONS
  68         bool "Enable long options"
  69         default n
  70         depends on BUSYBOX_CONFIG_RUNCON && BUSYBOX_CONFIG_GETOPT_LONG
  71         help
  72           Support long options for the runcon applet.
  73
  74 config BUSYBOX_CONFIG_SELINUXENABLED
  75         bool "selinuxenabled"
  76         default n
  77         depends on BUSYBOX_CONFIG_SELINUX
  78         help
  79           Enable support for this command to be used within shell scripts
  80           to determine if selinux is enabled.
  81
  82 config BUSYBOX_CONFIG_SETENFORCE
  83         bool "setenforce"
  84         default n
  85         depends on BUSYBOX_CONFIG_SELINUX
  86         help
  87           Enable support to modify the mode SELinux is running in.
  88
  89 config BUSYBOX_CONFIG_SETFILES
  90         bool "setfiles"
  91         default n
  92         depends on BUSYBOX_CONFIG_SELINUX
  93         help
  94           Enable support to modify to relabel files.
  95           Notice: If you built libselinux with -D_FILE_OFFSET_BITS=64,
  96           (It is default in libselinux's Makefile), you _must_ enable
  97           CONFIG_LFS.
  98
  99 config BUSYBOX_CONFIG_FEATURE_SETFILES_CHECK_OPTION
 100         bool "Enable check option"
 101         default n
 102         depends on BUSYBOX_CONFIG_SETFILES
 103         help
 104           Support "-c" option (check the validity of the contexts against
 105           the specified binary policy) for setfiles. Requires libsepol.
 106
 107 config BUSYBOX_CONFIG_SETSEBOOL
 108         bool "setsebool"
 109         default n
 110         depends on BUSYBOX_CONFIG_SELINUX
 111         help
 112           Enable support for change boolean.
 113           semanage and -P option is not supported yet.
 114
 115 config BUSYBOX_CONFIG_SESTATUS
 116         bool "sestatus"
 117         default n
 118         depends on BUSYBOX_CONFIG_SELINUX
 119         help
 120           Displays the status of SELinux.
 121
 122 endmenu
 123