mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-08-22 00:40:03 +00:00
![Hyunchul Lee](/assets/img/avatar_default.png)
When write syscall is called, every time security label is searched to determine that file's privileges should be changed. If LSM(Linux Security Model) is not used, this is useless. So introduce CONFIG_UBIFS_SECURITY to disable security labels. it's default value is "y". Signed-off-by: Hyunchul Lee <cheol.lee@lge.com> Signed-off-by: Richard Weinberger <richard@nod.at>
76 lines
2.5 KiB
Text
76 lines
2.5 KiB
Text
config UBIFS_FS
|
|
tristate "UBIFS file system support"
|
|
select CRC16
|
|
select CRC32
|
|
select CRYPTO if UBIFS_FS_ADVANCED_COMPR
|
|
select CRYPTO if UBIFS_FS_LZO
|
|
select CRYPTO if UBIFS_FS_ZLIB
|
|
select CRYPTO_LZO if UBIFS_FS_LZO
|
|
select CRYPTO_DEFLATE if UBIFS_FS_ZLIB
|
|
depends on MTD_UBI
|
|
help
|
|
UBIFS is a file system for flash devices which works on top of UBI.
|
|
|
|
config UBIFS_FS_ADVANCED_COMPR
|
|
bool "Advanced compression options"
|
|
depends on UBIFS_FS
|
|
help
|
|
This option allows to explicitly choose which compressions, if any,
|
|
are enabled in UBIFS. Removing compressors means inability to read
|
|
existing file systems.
|
|
|
|
If unsure, say 'N'.
|
|
|
|
config UBIFS_FS_LZO
|
|
bool "LZO compression support" if UBIFS_FS_ADVANCED_COMPR
|
|
depends on UBIFS_FS
|
|
default y
|
|
help
|
|
LZO compressor is generally faster than zlib but compresses worse.
|
|
Say 'Y' if unsure.
|
|
|
|
config UBIFS_FS_ZLIB
|
|
bool "ZLIB compression support" if UBIFS_FS_ADVANCED_COMPR
|
|
depends on UBIFS_FS
|
|
default y
|
|
help
|
|
Zlib compresses better than LZO but it is slower. Say 'Y' if unsure.
|
|
|
|
config UBIFS_ATIME_SUPPORT
|
|
bool "Access time support" if UBIFS_FS
|
|
depends on UBIFS_FS
|
|
default n
|
|
help
|
|
Originally UBIFS did not support atime, because it looked like a bad idea due
|
|
increased flash wear. This option adds atime support and it is disabled by default
|
|
to preserve the old behavior. If you enable this option, UBIFS starts updating atime,
|
|
which means that file-system read operations will cause writes (inode atime
|
|
updates). This may affect file-system performance and increase flash device wear,
|
|
so be careful. How often atime is updated depends on the selected strategy:
|
|
strictatime is the "heavy", relatime is "lighter", etc.
|
|
|
|
If unsure, say 'N'
|
|
|
|
config UBIFS_FS_ENCRYPTION
|
|
bool "UBIFS Encryption"
|
|
depends on UBIFS_FS && BLOCK
|
|
select FS_ENCRYPTION
|
|
default n
|
|
help
|
|
Enable encryption of UBIFS files and directories. This
|
|
feature is similar to ecryptfs, but it is more memory
|
|
efficient since it avoids caching the encrypted and
|
|
decrypted pages in the page cache.
|
|
|
|
config UBIFS_FS_SECURITY
|
|
bool "UBIFS Security Labels"
|
|
depends on UBIFS_FS
|
|
default y
|
|
help
|
|
Security labels provide an access control facility to support Linux
|
|
Security Models (LSMs) accepted by AppArmor, SELinux, Smack and TOMOYO
|
|
Linux. This option enables an extended attribute handler for file
|
|
security labels in the ubifs filesystem, so that it requires enabling
|
|
the extended attribute support in advance.
|
|
|
|
If you are not using a security module, say N.
|