1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677 |
- config BR2_PACKAGE_APPARMOR
- bool "apparmor"
- depends on BR2_USE_MMU # fork()
- depends on BR2_INSTALL_LIBSTDCPP
- depends on BR2_TOOLCHAIN_HAS_SYNC_4 # libapparmor
- depends on BR2_TOOLCHAIN_HAS_THREADS # libapparmor
- depends on BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_16 # libapparmor
- select BR2_PACKAGE_LIBAPPARMOR
- help
- AppArmor is an effective and easy-to-use Linux application
- security system. AppArmor proactively protects the operating
- system and applications from external or internal threats,
- even zero-day attacks, by enforcing good behavior and
- preventing even unknown application flaws from being
- exploited.
- This package builds the parser (which can load profiles).
- http://wiki.apparmor.net
- if BR2_PACKAGE_APPARMOR
- config BR2_PACKAGE_APPARMOR_BINUTILS
- bool "binutils"
- help
- A set of utilities (written in C):
- aa-enabled aa-exec
- comment "utils need python3"
- depends on !BR2_PACKAGE_PYTHON3
- config BR2_PACKAGE_APPARMOR_UTILS
- bool "utils"
- depends on BR2_PACKAGE_PYTHON3
- select BR2_PACKAGE_BUSYBOX_SHOW_OTHERS # net-tools
- select BR2_PACKAGE_NET_TOOLS # runtime (aa-unconfined)
- select BR2_PACKAGE_PYTHON3_READLINE
- help
- A set of utilities (written in python):
- aa-audit aa-disable aa-logprof
- aa-autodep aa-easyprof aa-mergeprof
- aa-cleanprof aa-enforce aa-status
- aa-complain aa-genprof aa-unconfined
- if BR2_PACKAGE_APPARMOR_UTILS
- comment "utils (extras) need bash and perl, and busybox or gawk"
- depends on !BR2_PACKAGE_BASH || !BR2_PACKAGE_PERL \
- || !(BR2_PACKAGE_BUSYBOX || BR2_PACKAGE_GAWK)
- config BR2_PACKAGE_APPARMOR_UTILS_EXTRA
- bool "utils (extras)"
- depends on BR2_PACKAGE_BASH
- depends on BR2_PACKAGE_PERL
- depends on BR2_PACKAGE_BUSYBOX || BR2_PACKAGE_GAWK
- help
- An extra set of utilities (written in a mixture of sh,
- bash, perl, and awk):
- aa-decode (bash + perl)
- aa-notify (perl)
- aa-remove-unknown (sh + awk)
- endif # BR2_PACKAGE_APPARMOR_UTILS
- config BR2_PACKAGE_APPARMOR_PROFILES
- bool "profiles"
- help
- Installs server-class profiles for a wide range of
- usual programs and daemons.
- endif # BR2_PACKAGE_APPARMOR
- comment "apparmor needs a toolchain w/ headers >= 3.16, threads, C++"
- depends on BR2_USE_MMU
- depends on BR2_TOOLCHAIN_HAS_SYNC_4
- depends on !BR2_INSTALL_LIBSTDCPP || !BR2_TOOLCHAIN_HAS_THREADS \
- || !BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_16
|