ubifs: support offline signed images
[linux-2.6-block.git] / fs / ubifs / Kconfig
CommitLineData
ec8f24b7 1# SPDX-License-Identifier: GPL-2.0-only
0d7eff87
AB
2config UBIFS_FS
3 tristate "UBIFS file system support"
4 select CRC16
5 select CRC32
6 select CRYPTO if UBIFS_FS_ADVANCED_COMPR
7 select CRYPTO if UBIFS_FS_LZO
8 select CRYPTO if UBIFS_FS_ZLIB
9 select CRYPTO_LZO if UBIFS_FS_LZO
10 select CRYPTO_DEFLATE if UBIFS_FS_ZLIB
49525e5e 11 select CRYPTO_HASH_INFO
643fa961 12 select UBIFS_FS_XATTR if FS_ENCRYPTION
0d7eff87
AB
13 depends on MTD_UBI
14 help
15 UBIFS is a file system for flash devices which works on top of UBI.
16
aa3d31e0
GU
17if UBIFS_FS
18
0d7eff87
AB
19config UBIFS_FS_ADVANCED_COMPR
20 bool "Advanced compression options"
0d7eff87
AB
21 help
22 This option allows to explicitly choose which compressions, if any,
692105b8 23 are enabled in UBIFS. Removing compressors means inability to read
0d7eff87
AB
24 existing file systems.
25
26 If unsure, say 'N'.
27
28config UBIFS_FS_LZO
29 bool "LZO compression support" if UBIFS_FS_ADVANCED_COMPR
0d7eff87
AB
30 default y
31 help
692105b8 32 LZO compressor is generally faster than zlib but compresses worse.
0d7eff87
AB
33 Say 'Y' if unsure.
34
35config UBIFS_FS_ZLIB
36 bool "ZLIB compression support" if UBIFS_FS_ADVANCED_COMPR
0d7eff87
AB
37 default y
38 help
025dfdaf 39 Zlib compresses better than LZO but it is slower. Say 'Y' if unsure.
8c1c5f26
DY
40
41config UBIFS_ATIME_SUPPORT
aa3d31e0 42 bool "Access time support"
8c1c5f26
DY
43 default n
44 help
45 Originally UBIFS did not support atime, because it looked like a bad idea due
46 increased flash wear. This option adds atime support and it is disabled by default
47 to preserve the old behavior. If you enable this option, UBIFS starts updating atime,
48 which means that file-system read operations will cause writes (inode atime
49 updates). This may affect file-system performance and increase flash device wear,
50 so be careful. How often atime is updated depends on the selected strategy:
51 strictatime is the "heavy", relatime is "lighter", etc.
52
53 If unsure, say 'N'
d475a507 54
7e5471ce
SA
55config UBIFS_FS_XATTR
56 bool "UBIFS XATTR support"
7e5471ce
SA
57 default y
58 help
59 Saying Y here includes support for extended attributes (xattrs).
60 Xattrs are name:value pairs associated with inodes by
61 the kernel or by users (see the attr(5) manual page).
62
63 If unsure, say Y.
64
8326c1ee
HL
65config UBIFS_FS_SECURITY
66 bool "UBIFS Security Labels"
aa3d31e0 67 depends on UBIFS_FS_XATTR
8326c1ee
HL
68 default y
69 help
70 Security labels provide an access control facility to support Linux
71 Security Models (LSMs) accepted by AppArmor, SELinux, Smack and TOMOYO
72 Linux. This option enables an extended attribute handler for file
73 security labels in the ubifs filesystem, so that it requires enabling
74 the extended attribute support in advance.
75
76 If you are not using a security module, say N.
d8a22773
SH
77
78config UBIFS_FS_AUTHENTICATION
79 bool "UBIFS authentication support"
817aa094 80 select KEYS
d8a22773 81 select CRYPTO_HMAC
817aa094 82 select SYSTEM_DATA_VERIFICATION
d8a22773
SH
83 help
84 Enable authentication support for UBIFS. This feature offers protection
85 against offline changes for both data and metadata of the filesystem.
86 If you say yes here you should also select a hashing algorithm such as
87 sha256, these are not selected automatically since there are many
88 different options.
aa3d31e0
GU
89
90endif # UBIFS_FS