18c2ecf20Sopenharmony_ci# SPDX-License-Identifier: GPL-2.0-only 28c2ecf20Sopenharmony_ciconfig FANOTIFY 38c2ecf20Sopenharmony_ci bool "Filesystem wide access notification" 48c2ecf20Sopenharmony_ci select FSNOTIFY 58c2ecf20Sopenharmony_ci select EXPORTFS 68c2ecf20Sopenharmony_ci default n 78c2ecf20Sopenharmony_ci help 88c2ecf20Sopenharmony_ci Say Y here to enable fanotify support. fanotify is a file access 98c2ecf20Sopenharmony_ci notification system which differs from inotify in that it sends 108c2ecf20Sopenharmony_ci an open file descriptor to the userspace listener along with 118c2ecf20Sopenharmony_ci the event. 128c2ecf20Sopenharmony_ci 138c2ecf20Sopenharmony_ci If unsure, say Y. 148c2ecf20Sopenharmony_ci 158c2ecf20Sopenharmony_ciconfig FANOTIFY_ACCESS_PERMISSIONS 168c2ecf20Sopenharmony_ci bool "fanotify permissions checking" 178c2ecf20Sopenharmony_ci depends on FANOTIFY 188c2ecf20Sopenharmony_ci depends on SECURITY 198c2ecf20Sopenharmony_ci default n 208c2ecf20Sopenharmony_ci help 218c2ecf20Sopenharmony_ci Say Y here is you want fanotify listeners to be able to make permissions 228c2ecf20Sopenharmony_ci decisions concerning filesystem events. This is used by some fanotify 238c2ecf20Sopenharmony_ci listeners which need to scan files before allowing the system access to 248c2ecf20Sopenharmony_ci use those files. This is used by some anti-malware vendors and by some 258c2ecf20Sopenharmony_ci hierarchical storage management systems. 268c2ecf20Sopenharmony_ci 278c2ecf20Sopenharmony_ci If unsure, say N. 28