Commit 65cc9c39 authored by John Johansen's avatar John Johansen
Browse files

apparmor: Update help description of policy hash for introspection 



Update help to note this option is not needed for small embedded systems
where regular policy introspection is not used.

Signed-off-by: default avatarJohn Johansen <john.johansen@canonical.com>
parent 0fc6ab40

security/apparmor/Kconfig

+4 −1
Original line number Diff line number Diff line
@@ -25,7 +25,10 @@ config SECURITY_APPARMOR_HASH 
	default y

	help

	  This option selects whether introspection of loaded policy

	  is available to userspace via the apparmor filesystem.

	  hashes is available to userspace via the apparmor

	  filesystem. This option provides a light weight means of

	  checking loaded policy.  This option adds to policy load

	  time and can be disabled for small embedded systems.



config SECURITY_APPARMOR_HASH_DEFAULT

       bool "Enable policy hash introspection by default"