+
+#
+# NFS related symbols
+#
+config KERNEL_IP_PNP
+ bool "Compile the kernel with rootfs on NFS"
+ help
+ If you want to make your kernel boot off a NFS server as root
+ filesystem, select Y here.
+
+if KERNEL_IP_PNP
+
+ config KERNEL_IP_PNP_DHCP
+ def_bool y
+
+ config KERNEL_IP_PNP_BOOTP
+ def_bool n
+
+ config KERNEL_IP_PNP_RARP
+ def_bool n
+
+ config KERNEL_NFS_FS
+ def_bool y
+
+ config KERNEL_NFS_V2
+ def_bool y
+
+ config KERNEL_NFS_V3
+ def_bool y
+
+ config KERNEL_ROOT_NFS
+ def_bool y
+
+endif
+
+menu "Filesystem ACL and attr support options"
+ config USE_FS_ACL_ATTR
+ bool "Use filesystem ACL and attr support by default"
+ default n
+ help
+ Make using ACLs (e.g. POSIX ACL, NFSv4 ACL) the default
+ for kernel and packages, except tmpfs, flash filesystems,
+ and old NFS. Also enable userspace extended attribute support
+ by default. (OpenWrt already has an expection it will be
+ present in the kernel).
+
+ config KERNEL_FS_POSIX_ACL
+ bool "Enable POSIX ACL support"
+ default y if USE_FS_ACL_ATTR
+
+ config KERNEL_BTRFS_FS_POSIX_ACL
+ bool "Enable POSIX ACL for BtrFS Filesystems"
+ select KERNEL_FS_POSIX_ACL
+ default y if USE_FS_ACL_ATTR
+
+ config KERNEL_EXT4_FS_POSIX_ACL
+ bool "Enable POSIX ACL for Ext4 Filesystems"
+ select KERNEL_FS_POSIX_ACL
+ default y if USE_FS_ACL_ATTR
+
+ config KERNEL_F2FS_FS_POSIX_ACL
+ bool "Enable POSIX ACL for F2FS Filesystems"
+ select KERNEL_FS_POSIX_ACL
+ default n
+
+ config KERNEL_JFFS2_FS_POSIX_ACL
+ bool "Enable POSIX ACL for JFFS2 Filesystems"
+ select KERNEL_FS_POSIX_ACL
+ default n
+
+ config KERNEL_TMPFS_POSIX_ACL
+ bool "Enable POSIX ACL for TMPFS Filesystems"
+ select KERNEL_FS_POSIX_ACL
+ default n
+
+ config KERNEL_CIFS_ACL
+ bool "Enable CIFS ACLs"
+ select KERNEL_FS_POSIX_ACL
+ default y if USE_FS_ACL_ATTR
+
+ config KERNEL_HFS_FS_POSIX_ACL
+ bool "Enable POSIX ACL for HFS Filesystems"
+ select KERNEL_FS_POSIX_ACL
+ default y if USE_FS_ACL_ATTR
+
+ config KERNEL_HFSPLUS_FS_POSIX_ACL
+ bool "Enable POSIX ACL for HFS+ Filesystems"
+ select KERNEL_FS_POSIX_ACL
+ default y if USE_FS_ACL_ATTR
+
+ config KERNEL_NFS_ACL_SUPPORT
+ bool "Enable ACLs for NFS"
+ default y if USE_FS_ACL_ATTR
+
+ config KERNEL_NFS_V3_ACL_SUPPORT
+ bool "Enable ACLs for NFSv3"
+ default n
+
+ config KERNEL_NFSD_V2_ACL_SUPPORT
+ bool "Enable ACLs for NFSDv2"
+ default n
+
+ config KERNEL_NFSD_V3_ACL_SUPPORT
+ bool "Enable ACLs for NFSDv3"
+ default n
+
+ config KERNEL_REISER_FS_POSIX_ACL
+ bool "Enable POSIX ACLs for ReiserFS"
+ select KERNEL_FS_POSIX_ACL
+ default y if USE_FS_ACL_ATTR
+
+ config KERNEL_XFS_POSIX_ACL
+ bool "Enable POSIX ACLs for XFS"
+ select KERNEL_FS_POSIX_ACL
+ default y if USE_FS_ACL_ATTR
+
+ config KERNEL_JFS_POSIX_ACL
+ bool "Enable POSIX ACLs for JFS"
+ select KERNEL_FS_POSIX_ACL
+ default y if USE_FS_ACL_ATTR
+
+endmenu
+
+config KERNEL_DEVMEM
+ bool "/dev/mem virtual device support"
+ help
+ Say Y here if you want to support the /dev/mem device.
+ The /dev/mem device is used to access areas of physical
+ memory.
+
+config KERNEL_DEVKMEM
+ bool "/dev/kmem virtual device support"
+ help
+ Say Y here if you want to support the /dev/kmem device. The
+ /dev/kmem device is rarely used, but can be used for certain
+ kind of kernel debugging operations.
+
+config KERNEL_SQUASHFS_FRAGMENT_CACHE_SIZE
+ int "Number of squashfs fragments cached"
+ default 2 if (SMALL_FLASH && !LOW_MEMORY_FOOTPRINT)
+ default 3
+
+config KERNEL_SQUASHFS_XATTR
+ bool "Squashfs XATTR support"
+
+#
+# compile optimiziation setting
+#
+choice
+ prompt "Compiler optimization level"
+ default KERNEL_CC_OPTIMIZE_FOR_SIZE if SMALL_FLASH
+
+config KERNEL_CC_OPTIMIZE_FOR_PERFORMANCE
+ bool "Optimize for performance"
+ help
+ This is the default optimization level for the kernel, building
+ with the "-O2" compiler flag for best performance and most
+ helpful compile-time warnings.
+
+config KERNEL_CC_OPTIMIZE_FOR_SIZE
+ bool "Optimize for size"
+ help
+ Enabling this option will pass "-Os" instead of "-O2" to
+ your compiler resulting in a smaller kernel.
+
+endchoice
+
+config KERNEL_AUDIT
+ bool "Auditing support"
+
+config KERNEL_SECURITY
+ bool "Enable different security models"
+
+config KERNEL_SECURITY_NETWORK
+ bool "Socket and Networking Security Hooks"
+ select KERNEL_SECURITY
+
+config KERNEL_SECURITY_SELINUX
+ bool "NSA SELinux Support"
+ select KERNEL_SECURITY_NETWORK
+ select KERNEL_AUDIT
+
+config KERNEL_SECURITY_SELINUX_BOOTPARAM
+ bool "NSA SELinux boot parameter"
+ depends on KERNEL_SECURITY_SELINUX
+ default y
+
+config KERNEL_SECURITY_SELINUX_DISABLE
+ bool "NSA SELinux runtime disable"
+ depends on KERNEL_SECURITY_SELINUX
+
+config KERNEL_SECURITY_SELINUX_DEVELOP
+ bool "NSA SELinux Development Support"
+ depends on KERNEL_SECURITY_SELINUX
+ default y
+
+config KERNEL_LSM
+ string
+ default "lockdown,yama,loadpin,safesetid,integrity,selinux"
+ depends on KERNEL_SECURITY_SELINUX
+
+config KERNEL_EXT4_FS_SECURITY
+ bool "Ext4 Security Labels"
+
+config KERNEL_F2FS_FS_SECURITY
+ bool "F2FS Security Labels"
+
+config KERNEL_UBIFS_FS_SECURITY
+ bool "UBIFS Security Labels"
+
+config KERNEL_JFFS2_FS_SECURITY
+ bool "JFFS2 Security Labels"