diff options
| author | Christian Göttsche <cgzones@googlemail.com> | 2023-07-18 21:49:19 +0300 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2023-07-20 23:21:52 +0300 |
| commit | 55a0e73806ec64279ea31d57b2116672631696a8 (patch) | |
| tree | e99f2602e088d8551a9438c801e060bb7d822405 /security/selinux/Kconfig | |
| parent | dd51fcd42fd6bf37608f54303b974b47f73c1490 (diff) | |
| download | linux-55a0e73806ec64279ea31d57b2116672631696a8.tar.xz | |
selinux: introduce SECURITY_SELINUX_DEBUG configuration
The policy database code contains several debug output statements
related to hashtable utilization. Those are guarded by the macro
DEBUG_HASHES, which is neither documented nor set anywhere.
Introduce a new Kconfig configuration guarding this and potential
other future debugging related code. Disable the setting by default.
Suggested-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
[PM: fixed line lengths in the help text]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'security/selinux/Kconfig')
| -rw-r--r-- | security/selinux/Kconfig | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/security/selinux/Kconfig b/security/selinux/Kconfig index c275115b5088..d30348fbe0df 100644 --- a/security/selinux/Kconfig +++ b/security/selinux/Kconfig @@ -68,3 +68,12 @@ config SECURITY_SELINUX_SID2STR_CACHE_SIZE conversion. Setting this option to 0 disables the cache completely. If unsure, keep the default value. + +config SECURITY_SELINUX_DEBUG + bool "SELinux kernel debugging support" + depends on SECURITY_SELINUX + default n + help + This enables debugging code designed to help SELinux kernel + developers, unless you know what this does in the kernel code you + should leave this disabled. |