CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE: NSA SELinux checkreqprot default value

General informations

The Linux kernel configuration item CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE:

• prompt: NSA SELinux checkreqprot default value
• type: int
• depends on: CONFIG_SECURITY_SELINUX
• defined in security/selinux/Kconfig
• found in Linux kernels: 2.6.12–2.6.39, 3.0–3.19, 4.0–4.20, 5.0–5.19, 6.0–6.3

Help text

This option sets the default value for the 'checkreqprot' flag that determines whether SELinux checks the protection requested by the application or the protection that will be applied by the kernel (including any implied execute for read-implies-exec) for mmap and mprotect calls. If this option is set to 0 (zero), SELinux will default to checking the protection that will be applied by the kernel. If this option is set to 1 (one), SELinux will default to checking the protection requested by the application. The checkreqprot flag may be changed from the default via the 'checkreqprot=' boot parameter. It may also be changed at runtime via /sys/fs/selinux/checkreqprot if authorized by policy.

WARNING: this option is deprecated and will be removed in a future kernel release.

If you are unsure how to answer this question, answer 0.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: