1# 2# For a description of the syntax of this configuration file, 3# see scripts/kbuild/config-language.txt. 4# 5 6menu "SELinux Utilities" 7 depends on SELINUX 8 9INSERT 10 11config CHCON 12 bool "chcon" 13 default n 14 depends on SELINUX 15 help 16 Enable support to change the security context of file. 17 18config FEATURE_CHCON_LONG_OPTIONS 19 bool "Enable long options" 20 default y 21 depends on CHCON && LONG_OPTS 22 help 23 Support long options for the chcon applet. 24 25config GETENFORCE 26 bool "getenforce" 27 default n 28 depends on SELINUX 29 help 30 Enable support to get the current mode of SELinux. 31 32config GETSEBOOL 33 bool "getsebool" 34 default n 35 depends on SELINUX 36 help 37 Enable support to get SELinux boolean values. 38 39config LOAD_POLICY 40 bool "load_policy" 41 default n 42 depends on SELINUX 43 help 44 Enable support to load SELinux policy. 45 46config MATCHPATHCON 47 bool "matchpathcon" 48 default n 49 depends on SELINUX 50 help 51 Enable support to get default security context of the 52 specified path from the file contexts configuration. 53 54config RESTORECON 55 bool "restorecon" 56 default n 57 depends on SELINUX 58 help 59 Enable support to relabel files. The feature is almost 60 the same as setfiles, but usage is a little different. 61 62config RUNCON 63 bool "runcon" 64 default n 65 depends on SELINUX 66 help 67 Enable support to run command in speficied security context. 68 69config FEATURE_RUNCON_LONG_OPTIONS 70 bool "Enable long options" 71 default y 72 depends on RUNCON && LONG_OPTS 73 help 74 Support long options for the runcon applet. 75 76config SELINUXENABLED 77 bool "selinuxenabled" 78 default n 79 depends on SELINUX 80 help 81 Enable support for this command to be used within shell scripts 82 to determine if selinux is enabled. 83 84config SETENFORCE 85 bool "setenforce" 86 default n 87 depends on SELINUX 88 help 89 Enable support to modify the mode SELinux is running in. 90 91config SETFILES 92 bool "setfiles" 93 default n 94 depends on SELINUX 95 help 96 Enable support to modify to relabel files. 97 Notice: If you built libselinux with -D_FILE_OFFSET_BITS=64, 98 (It is default in libselinux's Makefile), you _must_ enable 99 CONFIG_LFS. 100 101config FEATURE_SETFILES_CHECK_OPTION 102 bool "Enable check option" 103 default n 104 depends on SETFILES 105 help 106 Support "-c" option (check the validity of the contexts against 107 the specified binary policy) for setfiles. Requires libsepol. 108 109config SETSEBOOL 110 bool "setsebool" 111 default n 112 depends on SELINUX 113 help 114 Enable support for change boolean. 115 semanage and -P option is not supported yet. 116 117config SESTATUS 118 bool "sestatus" 119 default n 120 depends on SELINUX 121 help 122 Displays the status of SELinux. 123 124endmenu 125