xref: /openbmc/linux/security/yama/Kconfig (revision 58e16d792a6a8c6b750f637a4649967fcac853dc)
1*ec8f24b7SThomas Gleixner# SPDX-License-Identifier: GPL-2.0-only
22d514487SKees Cookconfig SECURITY_YAMA
32d514487SKees Cook	bool "Yama support"
42d514487SKees Cook	depends on SECURITY
52d514487SKees Cook	default n
62d514487SKees Cook	help
72d514487SKees Cook	  This selects Yama, which extends DAC support with additional
82d514487SKees Cook	  system-wide security settings beyond regular Linux discretionary
92d514487SKees Cook	  access controls. Currently available is ptrace scope restriction.
10730daa16SKees Cook	  Like capabilities, this security module stacks with other LSMs.
1190bb7664SKees Cook	  Further information can be found in
1290bb7664SKees Cook	  Documentation/admin-guide/LSM/Yama.rst.
132d514487SKees Cook
142d514487SKees Cook	  If you are unsure how to answer this question, answer N.
15