kernel: add options needed for SELinux

[openwrt/staging/mkresin.git] / config / Config-build.in

diff --git a/config/Config-build.in b/config/Config-build.in
index 199277167bf775b10ed42c2ec37c523a781bbc4e..fc94f4d45e0c4cd309555a8231cf93ec9277f2e2 100644 (file)
--- a/config/Config-build.in
+++ b/config/Config-build.in
@@ -103,6 +103,15 @@ menu "Global build settings"
                help
                  If enabled, buildinfo files will be stored in /etc/build.* of firmware.
 
+       config REPRODUCIBLE_DEBUG_INFO
+               bool "Make debug information reproducible"
+               default BUILDBOT
+               help
+                 This strips the local build path out of debug information. This has the
+                 advantage of making it reproducible, but the disadvantage of making local
+                 debugging using ./scripts/remote-gdb harder, since the debug data will
+                 no longer point to the full path on the build host.
+
        config COLLECT_KERNEL_DEBUG
                bool
                prompt "Collect kernel debug information"
@@ -319,4 +328,14 @@ menu "Global build settings"
                        bool "Full"
        endchoice
 
+       config TARGET_ROOTFS_SECURITY_LABELS
+               bool "Enable rootfs security labels"
+               select KERNEL_SQUASHFS_XATTR
+               select KERNEL_EXT4_FS_SECURITY
+               select KERNEL_F2FS_FS_SECURITY
+               select KERNEL_UBIFS_FS_SECURITY
+               select KERNEL_JFFS2_FS_SECURITY
+               select PACKAGE_refpolicy
+               help
+                 This option enables the usage of SELinux labels
 endmenu