xref: /kernel/linux/common_modules/xpm/Kconfig (revision 419b0af8)
1419b0af8Sopenharmony_ci# SPDX-License-Identifier: GPL-2.0-or-later
2419b0af8Sopenharmony_ci# Copyright (c) 2023 Huawei Device Co., Ltd.
3419b0af8Sopenharmony_ci#
4419b0af8Sopenharmony_ci# Config for the excutable permission manager
5419b0af8Sopenharmony_ci#
6419b0af8Sopenharmony_ci
7419b0af8Sopenharmony_cimenu "Executable permission manager"
8419b0af8Sopenharmony_ci
9419b0af8Sopenharmony_ciconfig SECURITY_XPM
10419b0af8Sopenharmony_ci	def_bool $(success, $(srctree)/scripts/ohos-check-dir.sh $(srctree)/security/xpm)
11419b0af8Sopenharmony_ci	depends on 64BIT
12419b0af8Sopenharmony_ci	depends on SECURITY_CODE_SIGN
13419b0af8Sopenharmony_ci	help
14419b0af8Sopenharmony_ci	  The Executable Permission Manager(XPM) control process execution
15419b0af8Sopenharmony_ci	  by inserting control poliy into the security hook list, such as execv,
16419b0af8Sopenharmony_ci	  mmap and etc. It can control not to execute an illegal signature
17419b0af8Sopenharmony_ci	  process.
18419b0af8Sopenharmony_ci
19419b0af8Sopenharmony_ciconfig DSMM_DEVELOPER_ENABLE
20419b0af8Sopenharmony_ci	bool "Enables device developer mode feature"
21419b0af8Sopenharmony_ci	depends on SECURITY_XPM
22419b0af8Sopenharmony_ci	default n
23419b0af8Sopenharmony_ci	help
24419b0af8Sopenharmony_ci	  This option should only be enabled for the device support developer
25419b0af8Sopenharmony_ci	  mode feature. But whether or not developer mode is enabled on the
26419b0af8Sopenharmony_ci	  device ultimately depends on the developer_mode string in cmdline.
27419b0af8Sopenharmony_ci
28419b0af8Sopenharmony_ciconfig SECURITY_XPM_DEBUG
29419b0af8Sopenharmony_ci	bool "Enables excutable permission manager debug mode"
30419b0af8Sopenharmony_ci	depends on SECURITY_XPM
31419b0af8Sopenharmony_ci	default n
32419b0af8Sopenharmony_ci	help
33419b0af8Sopenharmony_ci	  This option should only be enabled for debug test which can enable
34419b0af8Sopenharmony_ci	  some debug interfaces to obtain detailed information.
35419b0af8Sopenharmony_ciendmenu
36419b0af8Sopenharmony_ci# a blank line must be existed