^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) # SPDX-License-Identifier: GPL-2.0-only
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) config SUNRPC
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) tristate
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) depends on MULTIUSER
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) config SUNRPC_GSS
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7) tristate
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8) select OID_REGISTRY
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9) depends on MULTIUSER
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) config SUNRPC_BACKCHANNEL
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12) bool
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) depends on SUNRPC
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15) config SUNRPC_SWAP
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16) bool
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17) depends on SUNRPC
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19) config RPCSEC_GSS_KRB5
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20) tristate "Secure RPC: Kerberos V mechanism"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) depends on SUNRPC && CRYPTO
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22) depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23) depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24) default y
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25) select SUNRPC_GSS
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26) help
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27) Choose Y here to enable Secure RPC using the Kerberos version 5
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 28) GSS-API mechanism (RFC 1964).
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 29)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 30) Secure RPC calls with Kerberos require an auxiliary user-space
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 31) daemon which may be found in the Linux nfs-utils package
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 32) available from http://linux-nfs.org/. In addition, user-space
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 33) Kerberos support should be installed.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 34)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 35) If unsure, say Y.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 36)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 37) config SUNRPC_DISABLE_INSECURE_ENCTYPES
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 38) bool "Secure RPC: Disable insecure Kerberos encryption types"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 39) depends on RPCSEC_GSS_KRB5
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 40) default n
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 41) help
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 42) Choose Y here to disable the use of deprecated encryption types
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 43) with the Kerberos version 5 GSS-API mechanism (RFC 1964). The
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 44) deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 45) and DES-CBC-MD4. These types were deprecated by RFC 6649 because
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 46) they were found to be insecure.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 47)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 48) N is the default because many sites have deployed KDCs and
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 49) keytabs that contain only these deprecated encryption types.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 50) Choosing Y prevents the use of known-insecure encryption types
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 51) but might result in compatibility problems.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 52)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 53) config SUNRPC_DEBUG
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 54) bool "RPC: Enable dprintk debugging"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 55) depends on SUNRPC && SYSCTL
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 56) select DEBUG_FS
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 57) help
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 58) This option enables a sysctl-based debugging interface
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 59) that is be used by the 'rpcdebug' utility to turn on or off
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 60) logging of different aspects of the kernel RPC activity.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 61)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 62) Disabling this option will make your kernel slightly smaller,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 63) but makes troubleshooting NFS issues significantly harder.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 64)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 65) If unsure, say Y.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 66)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 67) config SUNRPC_XPRT_RDMA
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 68) tristate "RPC-over-RDMA transport"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 69) depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 70) default SUNRPC && INFINIBAND
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 71) select SG_POOL
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 72) help
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 73) This option allows the NFS client and server to use RDMA
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 74) transports (InfiniBand, iWARP, or RoCE).
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 75)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 76) To compile this support as a module, choose M. The module
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 77) will be called rpcrdma.ko.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 78)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 79) If unsure, or you know there is no RDMA capability on your
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 80) hardware platform, say N.
Orange Pi5 kernel
Deprecated Linux kernel 5.10.110 for OrangePi 5/5B/5+ boards
3 Commits
0 Branches
0 Tags