# SPDX-License-Identifier: GPL-2.0-only

config SECURITY_RBAC
	bool "KylinSec RBAC LSM support"
	depends on SECURITY
	default n
	help
	  This selects the KylinSec RBAC LSM support.
	  If you are unsure how to answer this question, answer N.

config SECURITY_RBAC_BIBA
    bool "Enable KylinSec RBAC BIBA support"
    depends on SECURITY_RBAC
    default n
    help
      This enables the KylinSec RBAC Biba Integrity Model support.
      BIBA provides additional security features for verifying kernel integrity.
      If you are unsure how to answer this question, answer N.

config SECURITY_RBAC_MLS
	bool "Enable KylinSec RBAC MLS support"
	depends on SECURITY_RBAC
	default n
	help
	  This selects the KylinSec RBAC MLS (Multi-Level Security) support.
	  If you are unsure how to answer this question, answer N.

config SECURITY_RBAC_ROLE
	bool "Enable KylinSec RBAC Role support"
	depends on SECURITY_RBAC
	default n
	help
 	  This option enables role separation in the KylinSec RBAC framework.
 	  If you are unsure how to answer this question, answer N.

config RBAC_INODE_XATTRS
	int
	depends on SECURITY_RBAC
	default 2 if SECURITY_RBAC_BIBA && SECURITY_RBAC_MLS
	default 1 if SECURITY_RBAC_BIBA || SECURITY_RBAC_MLS
	default 0
