1# SPDX-License-Identifier: GPL-2.0-or-later 2# Copyright (c) 2023 Huawei Device Co., Ltd. 3# 4# Config for the excutable permission manager 5# 6 7menu "Executable permission manager" 8 9config SECURITY_XPM 10 def_bool $(success, $(srctree)/scripts/ohos-check-dir.sh $(srctree)/security/xpm) 11 depends on 64BIT 12 depends on SECURITY_CODE_SIGN 13 help 14 The Executable Permission Manager(XPM) control process execution 15 by inserting control poliy into the security hook list, such as execv, 16 mmap and etc. It can control not to execute an illegal signature 17 process. 18 19config DSMM_DEVELOPER_ENABLE 20 bool "Enables device developer mode feature" 21 depends on SECURITY_XPM 22 default n 23 help 24 This option should only be enabled for the device support developer 25 mode feature. But whether or not developer mode is enabled on the 26 device ultimately depends on the developer_mode string in cmdline. 27 28config SECURITY_XPM_DEBUG 29 bool "Enables excutable permission manager debug mode" 30 depends on SECURITY_XPM 31 default n 32 help 33 This option should only be enabled for debug test which can enable 34 some debug interfaces to obtain detailed information. 35endmenu 36# a blank line must be existed