#
#	Config.in for LSM
#
if [ "$CONFIG_EXPERIMENTAL" = "y" ]; then
  mainmenu_option next_comment
  comment 'Linux Security Module (LSM)'
  bool 'Disable the forcing to turn grsecurity off?' CONFIG_FORCE_GRSEC_OFF
  bool 'Linux Security Module (LSM)' CONFIG_LSM
  if [ "$CONFIG_LSM" != "n" ]; then
     if [ "$CONFIG_FORCE_GRSEC_OFF" != "y" ]; then
	comment 'Grsecurity will be deactivated due to conflicts'
	define_bool CONFIG_GRKERNSEC n
     fi
     tristate '  Capabilities Support' CONFIG_SECURITY_CAPABILITIES
     dep_tristate '  IP Networking Support' CONFIG_SECURITY_IP $CONFIG_NETFILTER
     source security/selinux/Config.in
# FIXME: Needs to be fixed, it causes an Oops and then Kernel Panic, static and modular!
#     dep_tristate '  LSM port of Openwall (EXPERIMENTAL)' CONFIG_SECURITY_OWLSM $CONFIG_EXPERIMENTAL m
#     if [ "$CONFIG_SECURITY_OWLSM" = "y" -o "$CONFIG_SECURITY_OWLSM" = "m" ]; then
#		bool '    Add RLIMITS_NPROC check to execve' CONFIG_OWLSM_RLIMIT_NPROC
#		bool '    Restricted links in /tmp' CONFIG_OWLSM_LINK
#		bool '    Special handling of fd 0, 1, and 2' CONFIG_OWLSM_FD
#     fi
     dep_tristate '  Domain and Type Enforcement (EXPERIMENTAL)' CONFIG_SECURITY_DTE $CONFIG_EXPERIMENTAL
  fi
  endmenu

  if [ "$CONFIG_LSM" = "n" ]; then
     define_bool CONFIG_LIDS n
  fi

fi
