Kconfig 2.4 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980
  1. # SPDX-License-Identifier: GPL-2.0-only
  2. config SUNRPC
  3. tristate
  4. depends on MULTIUSER
  5. config SUNRPC_GSS
  6. tristate
  7. select OID_REGISTRY
  8. depends on MULTIUSER
  9. config SUNRPC_BACKCHANNEL
  10. bool
  11. depends on SUNRPC
  12. config SUNRPC_SWAP
  13. bool
  14. depends on SUNRPC
  15. config RPCSEC_GSS_KRB5
  16. tristate "Secure RPC: Kerberos V mechanism"
  17. depends on SUNRPC && CRYPTO
  18. depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS
  19. depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_SHA1 && CRYPTO_AES
  20. default y
  21. select SUNRPC_GSS
  22. help
  23. Choose Y here to enable Secure RPC using the Kerberos version 5
  24. GSS-API mechanism (RFC 1964).
  25. Secure RPC calls with Kerberos require an auxiliary user-space
  26. daemon which may be found in the Linux nfs-utils package
  27. available from http://linux-nfs.org/. In addition, user-space
  28. Kerberos support should be installed.
  29. If unsure, say Y.
  30. config SUNRPC_DISABLE_INSECURE_ENCTYPES
  31. bool "Secure RPC: Disable insecure Kerberos encryption types"
  32. depends on RPCSEC_GSS_KRB5
  33. default n
  34. help
  35. Choose Y here to disable the use of deprecated encryption types
  36. with the Kerberos version 5 GSS-API mechanism (RFC 1964). The
  37. deprecated encryption types include DES-CBC-MD5, DES-CBC-CRC,
  38. and DES-CBC-MD4. These types were deprecated by RFC 6649 because
  39. they were found to be insecure.
  40. N is the default because many sites have deployed KDCs and
  41. keytabs that contain only these deprecated encryption types.
  42. Choosing Y prevents the use of known-insecure encryption types
  43. but might result in compatibility problems.
  44. config SUNRPC_DEBUG
  45. bool "RPC: Enable dprintk debugging"
  46. depends on SUNRPC && SYSCTL
  47. select DEBUG_FS
  48. help
  49. This option enables a sysctl-based debugging interface
  50. that is be used by the 'rpcdebug' utility to turn on or off
  51. logging of different aspects of the kernel RPC activity.
  52. Disabling this option will make your kernel slightly smaller,
  53. but makes troubleshooting NFS issues significantly harder.
  54. If unsure, say Y.
  55. config SUNRPC_XPRT_RDMA
  56. tristate "RPC-over-RDMA transport"
  57. depends on SUNRPC && INFINIBAND && INFINIBAND_ADDR_TRANS
  58. default SUNRPC && INFINIBAND
  59. select SG_POOL
  60. help
  61. This option allows the NFS client and server to use RDMA
  62. transports (InfiniBand, iWARP, or RoCE).
  63. To compile this support as a module, choose M. The module
  64. will be called rpcrdma.ko.
  65. If unsure, or you know there is no RDMA capability on your
  66. hardware platform, say N.