^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) # SPDX-License-Identifier: GPL-2.0-only
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) config SECURITY_YAMA
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) bool "Yama support"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) depends on SECURITY
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) default n
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) help
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7) This selects Yama, which extends DAC support with additional
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8) system-wide security settings beyond regular Linux discretionary
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9) access controls. Currently available is ptrace scope restriction.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10) Like capabilities, this security module stacks with other LSMs.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) Further information can be found in
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12) Documentation/admin-guide/LSM/Yama.rst.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14) If you are unsure how to answer this question, answer N.