Kconfig 931 B

123456789101112131415161718192021
  1. # SPDX-License-Identifier: GPL-2.0-only
  2. config SECURITY_LANDLOCK
  3. bool "Landlock support"
  4. depends on SECURITY && !ARCH_EPHEMERAL_INODES
  5. select SECURITY_PATH
  6. help
  7. Landlock is a sandboxing mechanism that enables processes to restrict
  8. themselves (and their future children) by gradually enforcing
  9. tailored access control policies. A Landlock security policy is a
  10. set of access rights (e.g. open a file in read-only, make a
  11. directory, etc.) tied to a file hierarchy. Such policy can be
  12. configured and enforced by any processes for themselves using the
  13. dedicated system calls: landlock_create_ruleset(),
  14. landlock_add_rule(), and landlock_restrict_self().
  15. See Documentation/userspace-api/landlock.rst for further information.
  16. If you are unsure how to answer this question, answer N. Otherwise,
  17. you should also prepend "landlock," to the content of CONFIG_LSM to
  18. enable Landlock at boot time.