blob: efd102d4618514d6249e200728f1ba82d1487f8a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
|
#
# For a description of the syntax of this configuration file,
# see scripts/kbuild/config-language.txt.
#
menu "SELinux Utilities"
depends on SELINUX
config CHCON
bool "chcon"
depends on SELINUX
help
Enable support to change the security context of file.
config FEATURE_CHCON_LONG_OPTIONS
bool "Enable long options"
default y
depends on CHCON && GETOPT_LONG
help
Support long options for the chcon applet.
config GETENFORCE
bool "getenforce"
depends on SELINUX
help
Enable support to get the current mode of SELinux.
config GETSEBOOL
bool "getsebool"
depends on SELINUX
help
Enable support to get SELinux boolean values.
config LOAD_POLICY
bool "load_policy"
depends on SELINUX
help
Enable support to load SELinux policy.
config MATCHPATHCON
bool "matchpathcon"
depends on SELINUX
help
Enable support to get default security context of the
specified path from the file contexts configuration.
config RESTORECON
bool "restorecon"
depends on SELINUX
help
Enable support to relabel files. The feature is almost
the same as setfiles, but usage is a little different.
config RUNCON
bool "runcon"
depends on SELINUX
help
Enable support to run command in speficied security context.
config FEATURE_RUNCON_LONG_OPTIONS
bool "Enable long options"
default y
depends on RUNCON && GETOPT_LONG
help
Support long options for the runcon applet.
config SELINUXENABLED
bool "selinuxenabled"
depends on SELINUX
help
Enable support for this command to be used within shell scripts
to determine if selinux is enabled.
config SETENFORCE
bool "setenforce"
depends on SELINUX
help
Enable support to modify the mode SELinux is running in.
config SETFILES
bool "setfiles"
depends on SELINUX
help
Enable support to modify to relabel files.
Notice: If you built libselinux with -D_FILE_OFFSET_BITS=64,
(It is default in libselinux's Makefile), you _must_ enable
CONFIG_LFS.
config FEATURE_SETFILES_CHECK_OPTION
bool "Enable check option"
depends on SETFILES
help
Support "-c" option (check the validity of the contexts against
the specified binary policy) for setfiles. Requires libsepol.
config SETSEBOOL
bool "setsebool"
depends on SELINUX
help
Enable support for change boolean.
semanage and -P option is not supported yet.
config SESTATUS
bool "sestatus"
depends on SELINUX
help
Displays the status of SELinux.
endmenu
|
