xref: /openbmc/linux/security/integrity/evm/Kconfig (revision b34e08d5)
1config EVM
2	boolean "EVM support"
3	depends on SECURITY
4	select KEYS
5	select ENCRYPTED_KEYS
6	select CRYPTO_HMAC
7	select CRYPTO_SHA1
8	default n
9	help
10	  EVM protects a file's security extended attributes against
11	  integrity attacks.
12
13	  If you are unsure how to answer this question, answer N.
14
15config EVM_HMAC_VERSION
16	int "EVM HMAC version"
17	depends on EVM
18	default 2
19	help
20	  This options adds EVM HMAC version support.
21	  1 - original version
22	  2 - add per filesystem unique identifier (UUID) (default)
23
24	  WARNING: changing the HMAC calculation method or adding
25	  additional info to the calculation, requires existing EVM
26	  labeled file systems to be relabeled.
27