# SPDX-License-Identifier: GPL-2.0-only

config SECURITY_RBA
	bool "KylinSec RBA LSM support"
	depends on SECURITY
	default n
	help
	  This selects the KylinSec RBA LSM support.
	  If you are unsure how to answer this question, answer N.

config SECURITY_RBA_KIC
    bool "Enable KylinSec RBA KIC support"
    depends on SECURITY_RBA
    default n
    help
      This enables the KylinSec RBA KIC (Kernel Integrity Check) support.
      KIC provides additional security features for verifying kernel integrity.
      If you are unsure how to answer this question, answer N.

config SECURITY_RBA_MLS
	bool "Enable KylinSec RBA MLS support"
	depends on SECURITY_RBA
	default n
	help
	  This selects the KylinSec RBA MLS (Multi-Level Security) support.
	  If you are unsure how to answer this question, answer N.

config SECURITY_RBA_ROLE
	bool "Enable KylinSec RBA Role support"
	depends on SECURITY_RBA
	default n
	help
 	  This option enables role separation in the KylinSec RBA framework.
 	  If you are unsure how to answer this question, answer N.

config RBA_INODE_XATTRS
	int
	depends on SECURITY_RBA
	default 2 if SECURITY_RBA_KIC && SECURITY_RBA_MLS
	default 1 if SECURITY_RBA_KIC || SECURITY_RBA_MLS
	default 0
