xref: /linux/fs/notify/fanotify/Kconfig (revision 83fc61a5)
1ff0b16a9SEric Parisconfig FANOTIFY
2ff0b16a9SEric Paris	bool "Filesystem wide access notification"
3ff0b16a9SEric Paris	select FSNOTIFY
4ef601a9cSPaul Mundt	select ANON_INODES
5269ed32aSEric Paris	default n
6ff0b16a9SEric Paris	---help---
702582e9bSMasanari Iida	   Say Y here to enable fanotify support.  fanotify is a file access
8ff0b16a9SEric Paris	   notification system which differs from inotify in that it sends
96aacceceSMichael Witten	   an open file descriptor to the userspace listener along with
10ff0b16a9SEric Paris	   the event.
11ff0b16a9SEric Paris
12ff0b16a9SEric Paris	   If unsure, say Y.
139e66e423SEric Paris
149e66e423SEric Parisconfig FANOTIFY_ACCESS_PERMISSIONS
159e66e423SEric Paris	bool "fanotify permissions checking"
169e66e423SEric Paris	depends on FANOTIFY
179e66e423SEric Paris	depends on SECURITY
189e66e423SEric Paris	default n
199e66e423SEric Paris	---help---
209e66e423SEric Paris	   Say Y here is you want fanotify listeners to be able to make permissions
219e66e423SEric Paris	   decisions concerning filesystem events.  This is used by some fanotify
229e66e423SEric Paris	   listeners which need to scan files before allowing the system access to
239e66e423SEric Paris	   use those files.  This is used by some anti-malware vendors and by some
24*83fc61a5SMasanari Iida	   hierarchical storage management systems.
259e66e423SEric Paris
269e66e423SEric Paris	   If unsure, say N.
27