xref: /openbmc/linux/security/integrity/evm/Kconfig (revision e23feb16)
1config EVM
2	boolean "EVM support"
3	depends on SECURITY && KEYS && (TRUSTED_KEYS=y || TRUSTED_KEYS=n)
4	select CRYPTO_HMAC
5	select CRYPTO_MD5
6	select CRYPTO_SHA1
7	select ENCRYPTED_KEYS
8	default n
9	help
10	  EVM protects a file's security extended attributes against
11	  integrity attacks.
12
13	  If you are unsure how to answer this question, answer N.
14
15config EVM_HMAC_VERSION
16	int "EVM HMAC version"
17	depends on EVM
18	default 2
19	help
20	  This options adds EVM HMAC version support.
21	  1 - original version
22	  2 - add per filesystem unique identifier (UUID) (default)
23
24	  WARNING: changing the HMAC calculation method or adding
25	  additional info to the calculation, requires existing EVM
26	  labeled file systems to be relabeled.
27