From: John Johansen Date: Mon, 1 Feb 2021 10:20:35 +0000 (-0800) Subject: apparmor: Update help description of policy hash for introspection X-Git-Url: https://git.kernel.dk/?a=commitdiff_plain;h=6a029e3d3e4af7b1bc5a8053a86604fdbd548034;p=linux-block.git apparmor: Update help description of policy hash for introspection Update help to note this option is not needed for small embedded systems where regular policy introspection is not used. Signed-off-by: John Johansen --- diff --git a/security/apparmor/Kconfig b/security/apparmor/Kconfig index 348ed6cfa08a..272dca497c6d 100644 --- a/security/apparmor/Kconfig +++ b/security/apparmor/Kconfig @@ -25,7 +25,10 @@ config SECURITY_APPARMOR_HASH default y help This option selects whether introspection of loaded policy - is available to userspace via the apparmor filesystem. + hashes is available to userspace via the apparmor + filesystem. This option provides a light weight means of + checking loaded policy. This option adds to policy load + time and can be disabled for small embedded systems. config SECURITY_APPARMOR_HASH_DEFAULT bool "Enable policy hash introspection by default"