| Kees Cook | 2d51448 | 2011-12-21 12:17:04 -0800 | [diff] [blame] | 1 | config SECURITY_YAMA |
| 2 | bool "Yama support" |
| 3 | depends on SECURITY |
| Kees Cook | 2d51448 | 2011-12-21 12:17:04 -0800 | [diff] [blame] | 4 | default n |
| 5 | help |
| 6 | This selects Yama, which extends DAC support with additional |
| 7 | system-wide security settings beyond regular Linux discretionary |
| 8 | access controls. Currently available is ptrace scope restriction. |
| Kees Cook | 730daa1 | 2015-07-23 18:02:48 -0700 | [diff] [blame] | 9 | Like capabilities, this security module stacks with other LSMs. |
| Kees Cook | 2d51448 | 2011-12-21 12:17:04 -0800 | [diff] [blame] | 10 | Further information can be found in Documentation/security/Yama.txt. |
| 11 | |
| 12 | If you are unsure how to answer this question, answer N. |