^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) # SPDX-License-Identifier: GPL-2.0-only
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) config FANOTIFY
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) bool "Filesystem wide access notification"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) select FSNOTIFY
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) select EXPORTFS
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) default n
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7) help
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8) Say Y here to enable fanotify support. fanotify is a file access
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9) notification system which differs from inotify in that it sends
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10) an open file descriptor to the userspace listener along with
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) the event.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) If unsure, say Y.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15) config FANOTIFY_ACCESS_PERMISSIONS
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16) bool "fanotify permissions checking"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17) depends on FANOTIFY
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18) depends on SECURITY
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19) default n
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20) help
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) Say Y here is you want fanotify listeners to be able to make permissions
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22) decisions concerning filesystem events. This is used by some fanotify
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23) listeners which need to scan files before allowing the system access to
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24) use those files. This is used by some anti-malware vendors and by some
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25) hierarchical storage management systems.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27) If unsure, say N.