| Kees Cook | 2d51448 | 2011-12-21 12:17:04 -0800 | [diff] [blame] | 1 | config SECURITY_YAMA |
| 2 | bool "Yama support" |
| 3 | depends on SECURITY |
| Kees Cook | 2d51448 | 2011-12-21 12:17:04 -0800 | [diff] [blame] | 4 | default n |
| 5 | help |
| 6 | This selects Yama, which extends DAC support with additional |
| 7 | system-wide security settings beyond regular Linux discretionary |
| 8 | access controls. Currently available is ptrace scope restriction. |
| Kees Cook | 730daa1 | 2015-07-23 18:02:48 -0700 | [diff] [blame] | 9 | Like capabilities, this security module stacks with other LSMs. |
| Kees Cook | 90bb766 | 2017-05-13 04:51:47 -0700 | [diff] [blame] | 10 | Further information can be found in |
| 11 | Documentation/admin-guide/LSM/Yama.rst. |
| Kees Cook | 2d51448 | 2011-12-21 12:17:04 -0800 | [diff] [blame] | 12 | |
| 13 | If you are unsure how to answer this question, answer N. |