18c2ecf20Sopenharmony_ci# SPDX-License-Identifier: GPL-2.0-only
28c2ecf20Sopenharmony_ciconfig SUNRPC
38c2ecf20Sopenharmony_ci	tristate
48c2ecf20Sopenharmony_ci	depends on MULTIUSER
58c2ecf20Sopenharmony_ci
68c2ecf20Sopenharmony_ciconfig SUNRPC_GSS
78c2ecf20Sopenharmony_ci	tristate
88c2ecf20Sopenharmony_ci	select OID_REGISTRY
98c2ecf20Sopenharmony_ci	depends on MULTIUSER
108c2ecf20Sopenharmony_ci
118c2ecf20Sopenharmony_ciconfig SUNRPC_BACKCHANNEL
128c2ecf20Sopenharmony_ci	bool
138c2ecf20Sopenharmony_ci	depends on SUNRPC
148c2ecf20Sopenharmony_ci
158c2ecf20Sopenharmony_ciconfig SUNRPC_SWAP
168c2ecf20Sopenharmony_ci	bool
178c2ecf20Sopenharmony_ci	depends on SUNRPC
188c2ecf20Sopenharmony_ci
198c2ecf20Sopenharmony_ciconfig RPCSEC_GSS_KRB5
208c2ecf20Sopenharmony_ci	tristate "Secure RPC: Kerberos V mechanism"
218c2ecf20Sopenharmony_ci	depends on SUNRPC && CRYPTO
228c2ecf20Sopenharmony_ci	depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS
238c2ecf20Sopenharmony_ci	depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES
248c2ecf20Sopenharmony_ci	default y
258c2ecf20Sopenharmony_ci	select SUNRPC_GSS
268c2ecf20Sopenharmony_ci	help
278c2ecf20Sopenharmony_ci	  Choose Y here to enable Secure RPC using the Kerberos version 5
288c2ecf20Sopenharmony_ci	  GSS-API mechanism (RFC 1964).
298c2ecf20Sopenharmony_ci
308c2ecf20Sopenharmony_ci	  Secure RPC calls with Kerberos require an auxiliary user-space
318c2ecf20Sopenharmony_ci	  daemon which may be found in the Linux nfs-utils package
328c2ecf20Sopenharmony_ci	  available from http://linux-nfs.org/.  In addition, user-space
338c2ecf20Sopenharmony_ci	  Kerberos support should be installed.
348c2ecf20Sopenharmony_ci
358c2ecf20Sopenharmony_ci	  If unsure, say Y.
368c2ecf20Sopenharmony_ci
378c2ecf20Sopenharmony_ciconfig SUNRPC_DISABLE_INSECURE_ENCTYPES
388c2ecf20Sopenharmony_ci	bool "Secure RPC: Disable insecure Kerberos encryption types"
398c2ecf20Sopenharmony_ci	depends on RPCSEC_GSS_KRB5
408c2ecf20Sopenharmony_ci	default n
418c2ecf20Sopenharmony_ci	help
428c2ecf20Sopenharmony_ci	  Choose Y here to disable the use of deprecated encryption types
438c2ecf20Sopenharmony_ci	  with the Kerberos version 5 GSS-API mechanism (RFC 1964). The
448c2ecf20Sopenharmony_ci	  deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC,
458c2ecf20Sopenharmony_ci	  and DES-CBC-MD4. These types were deprecated by RFC 6649 because
468c2ecf20Sopenharmony_ci	  they were found to be insecure.
478c2ecf20Sopenharmony_ci
488c2ecf20Sopenharmony_ci	  N is the default because many sites have deployed KDCs and
498c2ecf20Sopenharmony_ci	  keytabs that contain only these deprecated encryption types.
508c2ecf20Sopenharmony_ci	  Choosing Y prevents the use of known-insecure encryption types
518c2ecf20Sopenharmony_ci	  but might result in compatibility problems.
528c2ecf20Sopenharmony_ci
538c2ecf20Sopenharmony_ciconfig SUNRPC_DEBUG
548c2ecf20Sopenharmony_ci	bool "RPC: Enable dprintk debugging"
558c2ecf20Sopenharmony_ci	depends on SUNRPC && SYSCTL
568c2ecf20Sopenharmony_ci	select DEBUG_FS
578c2ecf20Sopenharmony_ci	help
588c2ecf20Sopenharmony_ci	  This option enables a sysctl-based debugging interface
598c2ecf20Sopenharmony_ci	  that is be used by the 'rpcdebug' utility to turn on or off
608c2ecf20Sopenharmony_ci	  logging of different aspects of the kernel RPC activity.
618c2ecf20Sopenharmony_ci
628c2ecf20Sopenharmony_ci	  Disabling this option will make your kernel slightly smaller,
638c2ecf20Sopenharmony_ci	  but makes troubleshooting NFS issues significantly harder.
648c2ecf20Sopenharmony_ci
658c2ecf20Sopenharmony_ci	  If unsure, say Y.
668c2ecf20Sopenharmony_ci
678c2ecf20Sopenharmony_ciconfig SUNRPC_XPRT_RDMA
688c2ecf20Sopenharmony_ci	tristate "RPC-over-RDMA transport"
698c2ecf20Sopenharmony_ci	depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS
708c2ecf20Sopenharmony_ci	default SUNRPC && INFINIBAND
718c2ecf20Sopenharmony_ci	select SG_POOL
728c2ecf20Sopenharmony_ci	help
738c2ecf20Sopenharmony_ci	  This option allows the NFS client and server to use RDMA
748c2ecf20Sopenharmony_ci	  transports (InfiniBand, iWARP, or RoCE).
758c2ecf20Sopenharmony_ci
768c2ecf20Sopenharmony_ci	  To compile this support as a module, choose M. The module
778c2ecf20Sopenharmony_ci	  will be called rpcrdma.ko.
788c2ecf20Sopenharmony_ci
798c2ecf20Sopenharmony_ci	  If unsure, or you know there is no RDMA capability on your
808c2ecf20Sopenharmony_ci	  hardware platform, say N.
81