Kconfig 724 B

1234567891011121314151617181920212223242526
  1. config EVM
  2. boolean "EVM support"
  3. depends on SECURITY && KEYS && (TRUSTED_KEYS=y || TRUSTED_KEYS=n)
  4. select CRYPTO_HMAC
  5. select CRYPTO_MD5
  6. select CRYPTO_SHA1
  7. select ENCRYPTED_KEYS
  8. default n
  9. help
  10. EVM protects a file's security extended attributes against
  11. integrity attacks.
  12. If you are unsure how to answer this question, answer N.
  13. config EVM_HMAC_VERSION
  14. int "EVM HMAC version"
  15. depends on EVM
  16. default 2
  17. help
  18. This options adds EVM HMAC version support.
  19. 1 - original version
  20. 2 - add per filesystem unique identifier (UUID) (default)
  21. WARNING: changing the HMAC calculation method or adding
  22. additional info to the calculation, requires existing EVM
  23. labeled file systems to be relabeled.