| config EVM |
| boolean "EVM support" |
| depends on SECURITY && KEYS && (TRUSTED_KEYS=y || TRUSTED_KEYS=n) |
| select CRYPTO_HMAC |
| select CRYPTO_MD5 |
| select CRYPTO_SHA1 |
| select ENCRYPTED_KEYS |
| default n |
| help |
| EVM protects a file's security extended attributes against |
| integrity attacks. |
| |
| If you are unsure how to answer this question, answer N. |
| |
| config EVM_HMAC_VERSION |
| int "EVM HMAC version" |
| depends on EVM |
| default 2 |
| help |
| This options adds EVM HMAC version support. |
| 1 - original version |
| 2 - add per filesystem unique identifier (UUID) (default) |
| |
| WARNING: changing the HMAC calculation method or adding |
| additional info to the calculation, requires existing EVM |
| labeled file systems to be relabeled. |