162306a36Sopenharmony_ci# SPDX-License-Identifier: GPL-2.0-only 262306a36Sopenharmony_ciconfig FANOTIFY 362306a36Sopenharmony_ci bool "Filesystem wide access notification" 462306a36Sopenharmony_ci select FSNOTIFY 562306a36Sopenharmony_ci select EXPORTFS 662306a36Sopenharmony_ci default n 762306a36Sopenharmony_ci help 862306a36Sopenharmony_ci Say Y here to enable fanotify support. fanotify is a file access 962306a36Sopenharmony_ci notification system which differs from inotify in that it sends 1062306a36Sopenharmony_ci an open file descriptor to the userspace listener along with 1162306a36Sopenharmony_ci the event. 1262306a36Sopenharmony_ci 1362306a36Sopenharmony_ci If unsure, say Y. 1462306a36Sopenharmony_ci 1562306a36Sopenharmony_ciconfig FANOTIFY_ACCESS_PERMISSIONS 1662306a36Sopenharmony_ci bool "fanotify permissions checking" 1762306a36Sopenharmony_ci depends on FANOTIFY 1862306a36Sopenharmony_ci depends on SECURITY 1962306a36Sopenharmony_ci default n 2062306a36Sopenharmony_ci help 2162306a36Sopenharmony_ci Say Y here is you want fanotify listeners to be able to make permissions 2262306a36Sopenharmony_ci decisions concerning filesystem events. This is used by some fanotify 2362306a36Sopenharmony_ci listeners which need to scan files before allowing the system access to 2462306a36Sopenharmony_ci use those files. This is used by some anti-malware vendors and by some 2562306a36Sopenharmony_ci hierarchical storage management systems. 2662306a36Sopenharmony_ci 2762306a36Sopenharmony_ci If unsure, say N. 28