config SECURITY_FILEARMOR
	bool "FileArmor support"
	depends on SECURITY && NET
	select AUDIT
	select SECURITY_PATH
	select SECURITYFS
	select SECURITY_NETWORK
	default y
	help
	  This enables the FileArmor security module.
	  Required userspace tools

	  If you are unsure how to answer this question, answer N.

config SECURITY_FILEARMOR_BOOTPARAM_VALUE
	int "FileArmor boot parameter default value"
	depends on SECURITY_FILEARMOR
	range 0 1
	default 1
	help
	  This option sets the default value for the kernel parameter
	  'filearmor', which allows FileArmor to be enabled or disabled
          at boot.  If this option is set to 0 (zero), the FileArmor
	  kernel parameter will default to 0, disabling FileArmor at
	  boot.  If this option is set to 1 (one), the FileArmor
	  kernel parameter will default to 1, enabling FileArmor at
	  boot.

	  If you are unsure how to answer this question, answer 1.



config SECURITY_FILEARMOR_DEBUG
	bool "Build FileArmor with debug code"
	depends on SECURITY_FILEARMOR
	default n
	help
	  Build filearmor with debugging logic in filearmor. Not all
	  debugging logic will necessarily be enabled. A submenu will
	  provide fine grained control of the debug options that are
	  available.

config SECURITY_FILEARMOR_DEBUG_ASSERTS
	bool "Build FileArmor with debugging asserts"
	depends on SECURITY_FILEARMOR_DEBUG
	default y
	help
	  Enable code assertions made with AA_BUG. These are primarily
	  function entry preconditions but also exist at other key
	  points. If the assert is triggered it will trigger a WARN
	  message.

config SECURITY_FILEARMOR_DEBUG_MESSAGES
	bool "Debug messages enabled by default"
	depends on SECURITY_FILEARMOR_DEBUG
	default n
	help
	  Set the default value of the filearmor.debug kernel parameter.
	  When enabled, various debug messages will be logged to
	  the kernel message buffer.


