openwrt/package/utils/busybox/config/selinux/Config.in

# DO NOT EDIT. This file is generated from Config.src
#
# For a description of the syntax of this configuration file,
# see scripts/kbuild/config-language.txt.
#

menu "SELinux Utilities"
	depends on BUSYBOX_CONFIG_SELINUX

config BUSYBOX_CONFIG_CHCON
	bool "chcon"
	default BUSYBOX_DEFAULT_CHCON
	depends on BUSYBOX_CONFIG_SELINUX
	help
	  Enable support to change the security context of file.

config BUSYBOX_CONFIG_FEATURE_CHCON_LONG_OPTIONS
	bool "Enable long options"
	default BUSYBOX_DEFAULT_FEATURE_CHCON_LONG_OPTIONS
	depends on BUSYBOX_CONFIG_CHCON && BUSYBOX_CONFIG_LONG_OPTS
	help
	  Support long options for the chcon applet.
config BUSYBOX_CONFIG_GETENFORCE
	bool "getenforce"
	default BUSYBOX_DEFAULT_GETENFORCE
	depends on BUSYBOX_CONFIG_SELINUX
	help
	  Enable support to get the current mode of SELinux.
config BUSYBOX_CONFIG_GETSEBOOL
	bool "getsebool"
	default BUSYBOX_DEFAULT_GETSEBOOL
	depends on BUSYBOX_CONFIG_SELINUX
	help
	  Enable support to get SELinux boolean values.
config BUSYBOX_CONFIG_LOAD_POLICY
	bool "load_policy"
	default BUSYBOX_DEFAULT_LOAD_POLICY
	depends on BUSYBOX_CONFIG_SELINUX
	help
	  Enable support to load SELinux policy.
config BUSYBOX_CONFIG_MATCHPATHCON
	bool "matchpathcon"
	default BUSYBOX_DEFAULT_MATCHPATHCON
	depends on BUSYBOX_CONFIG_SELINUX
	help
	  Enable support to get default security context of the
	  specified path from the file contexts configuration.
config BUSYBOX_CONFIG_RUNCON
	bool "runcon"
	default BUSYBOX_DEFAULT_RUNCON
	depends on BUSYBOX_CONFIG_SELINUX
	help
	  Enable support to run command in specified security context.

config BUSYBOX_CONFIG_FEATURE_RUNCON_LONG_OPTIONS
	bool "Enable long options"
	default BUSYBOX_DEFAULT_FEATURE_RUNCON_LONG_OPTIONS
	depends on BUSYBOX_CONFIG_RUNCON && BUSYBOX_CONFIG_LONG_OPTS
	help
	  Support long options for the runcon applet.
config BUSYBOX_CONFIG_SELINUXENABLED
	bool "selinuxenabled"
	default BUSYBOX_DEFAULT_SELINUXENABLED
	depends on BUSYBOX_CONFIG_SELINUX
	help
	  Enable support for this command to be used within shell scripts
	  to determine if selinux is enabled.
config BUSYBOX_CONFIG_SESTATUS
	bool "sestatus"
	default BUSYBOX_DEFAULT_SESTATUS
	depends on BUSYBOX_CONFIG_SELINUX
	help
	  Displays the status of SELinux.
config BUSYBOX_CONFIG_SETENFORCE
	bool "setenforce"
	default BUSYBOX_DEFAULT_SETENFORCE
	depends on BUSYBOX_CONFIG_SELINUX
	help
	  Enable support to modify the mode SELinux is running in.
config BUSYBOX_CONFIG_SETFILES
	bool "setfiles"
	default BUSYBOX_DEFAULT_SETFILES
	depends on BUSYBOX_CONFIG_SELINUX
	help
	  Enable support to modify to relabel files.
	  Notice: If you built libselinux with -D_FILE_OFFSET_BITS=64,
	  (It is default in libselinux's Makefile), you _must_ enable
	  CONFIG_LFS.

config BUSYBOX_CONFIG_FEATURE_SETFILES_CHECK_OPTION
	bool "Enable check option"
	default BUSYBOX_DEFAULT_FEATURE_SETFILES_CHECK_OPTION
	depends on BUSYBOX_CONFIG_SETFILES
	help
	  Support "-c" option (check the validity of the contexts against
	  the specified binary policy) for setfiles. Requires libsepol.

config BUSYBOX_CONFIG_RESTORECON
	bool "restorecon"
	default BUSYBOX_DEFAULT_RESTORECON
	depends on BUSYBOX_CONFIG_SELINUX
	help
	  Enable support to relabel files. The feature is almost
	  the same as setfiles, but usage is a little different.
config BUSYBOX_CONFIG_SETSEBOOL
	bool "setsebool"
	default BUSYBOX_DEFAULT_SETSEBOOL
	depends on BUSYBOX_CONFIG_SELINUX
	help
	  Enable support for change boolean.
	  semanage and -P option is not supported yet.

endmenu