1*4882a593Smuzhiyun# SPDX-License-Identifier: GPL-2.0-only 2*4882a593Smuzhiyunconfig FANOTIFY 3*4882a593Smuzhiyun bool "Filesystem wide access notification" 4*4882a593Smuzhiyun select FSNOTIFY 5*4882a593Smuzhiyun select EXPORTFS 6*4882a593Smuzhiyun default n 7*4882a593Smuzhiyun help 8*4882a593Smuzhiyun Say Y here to enable fanotify support. fanotify is a file access 9*4882a593Smuzhiyun notification system which differs from inotify in that it sends 10*4882a593Smuzhiyun an open file descriptor to the userspace listener along with 11*4882a593Smuzhiyun the event. 12*4882a593Smuzhiyun 13*4882a593Smuzhiyun If unsure, say Y. 14*4882a593Smuzhiyun 15*4882a593Smuzhiyunconfig FANOTIFY_ACCESS_PERMISSIONS 16*4882a593Smuzhiyun bool "fanotify permissions checking" 17*4882a593Smuzhiyun depends on FANOTIFY 18*4882a593Smuzhiyun depends on SECURITY 19*4882a593Smuzhiyun default n 20*4882a593Smuzhiyun help 21*4882a593Smuzhiyun Say Y here is you want fanotify listeners to be able to make permissions 22*4882a593Smuzhiyun decisions concerning filesystem events. This is used by some fanotify 23*4882a593Smuzhiyun listeners which need to scan files before allowing the system access to 24*4882a593Smuzhiyun use those files. This is used by some anti-malware vendors and by some 25*4882a593Smuzhiyun hierarchical storage management systems. 26*4882a593Smuzhiyun 27*4882a593Smuzhiyun If unsure, say N. 28