CONFIG_RSBAC=y # General RSBAC options CONFIG_RSBAC_INIT_THREAD=y CONFIG_RSBAC_MAX_INIT_TIME=60 CONFIG_RSBAC_PROC=y CONFIG_RSBAC_INIT_CHECK=y # CONFIG_RSBAC_NO_WRITE is not set # CONFIG_RSBAC_MSDOS_WRITE is not set CONFIG_RSBAC_AUTO_WRITE=5 CONFIG_RSBAC_RCU_RATE=1000 CONFIG_RSBAC_LIST_MAX_HASHES=128 CONFIG_RSBAC_LIST_CHECK_INTERVAL=1800 CONFIG_RSBAC_LIST_STATS=y CONFIG_RSBAC_LIST_TRANS=y CONFIG_RSBAC_LIST_TRANS_MAX_TTL=3600 CONFIG_RSBAC_LIST_TRANS_RANDOM_TA=y CONFIG_RSBAC_FD_CACHE=y CONFIG_RSBAC_FD_CACHE_TTL=1800 CONFIG_RSBAC_FD_CACHE_MAX_ITEMS=1000 # CONFIG_RSBAC_DEBUG is not set # CONFIG_RSBAC_DEV_USER_BACKUP is not set CONFIG_RSBAC_SECOFF_UID=400 CONFIG_RSBAC_INIT_DELAY=y CONFIG_RSBAC_GEN_NR_P_LISTS=4 CONFIG_RSBAC_UM=y CONFIG_RSBAC_UM_DIGEST=y CONFIG_RSBAC_UM_USER_MIN=2000 CONFIG_RSBAC_UM_GROUP_MIN=2000 CONFIG_RSBAC_UM_EXCL=y CONFIG_RSBAC_UM_MIN_PASS_LEN=6 CONFIG_RSBAC_UM_NON_ALPHA=y CONFIG_RSBAC_UM_PWHISTORY=y CONFIG_RSBAC_UM_PWHISTORY_MAX=8 CONFIG_RSBAC_UM_ONETIME=y CONFIG_RSBAC_UM_ONETIME_MAX=100 CONFIG_RSBAC_UM_VIRTUAL=y CONFIG_RSBAC_UM_VIRTUAL_ISOLATE=y # RSBAC networking options CONFIG_RSBAC_NET=y CONFIG_RSBAC_NET_DEV=y CONFIG_RSBAC_NET_DEV_VIRT=y CONFIG_RSBAC_IND_NETDEV_LOG=y CONFIG_RSBAC_NET_OBJ=y CONFIG_RSBAC_NET_OBJ_RW=y CONFIG_RSBAC_IND_NETOBJ_LOG=y # CONFIG_RSBAC_MAINT is not set CONFIG_RSBAC_REG=y # CONFIG_RSBAC_REG_SAMPLES is not set CONFIG_RSBAC_AUTH=y CONFIG_RSBAC_AUTH_AUTH_PROT=y CONFIG_RSBAC_AUTH_OTHER_PROT=y CONFIG_RSBAC_AUTH_UM_PROT=y CONFIG_RSBAC_AUTH_DAC_OWNER=y CONFIG_RSBAC_AUTH_ALLOW_SAME=y CONFIG_RSBAC_AUTH_GROUP=y CONFIG_RSBAC_AUTH_DAC_GROUP=y CONFIG_RSBAC_AUTH_LEARN=y CONFIG_RSBAC_RC=y CONFIG_RSBAC_RC_AUTH_PROT=y CONFIG_RSBAC_RC_UM_PROT=y CONFIG_RSBAC_RC_GEN_PROT=y # CONFIG_RSBAC_RC_BACKUP is not set CONFIG_RSBAC_RC_NET_DEV_PROT=y CONFIG_RSBAC_RC_NET_OBJ_PROT=y # CONFIG_RSBAC_RC_NET_OBJ_UNIX_PROCESS is not set CONFIG_RSBAC_RC_NR_P_LISTS=8 CONFIG_RSBAC_RC_KERNEL_PROCESS_TYPE=999999 CONFIG_RSBAC_ACL=y # CONFIG_RSBAC_ACL_SUPER_FILTER is not set CONFIG_RSBAC_ACL_AUTH_PROT=y CONFIG_RSBAC_ACL_UM_PROT=y CONFIG_RSBAC_ACL_GEN_PROT=y # CONFIG_RSBAC_ACL_BACKUP is not set CONFIG_RSBAC_ACL_LEARN=y CONFIG_RSBAC_ACL_NET_DEV_PROT=y CONFIG_RSBAC_ACL_NET_OBJ_PROT=y # CONFIG_RSBAC_MAC is not set CONFIG_RSBAC_DAZ=y CONFIG_RSBAC_DAZ_CACHE=y CONFIG_RSBAC_DAZ_TTL=86400 # CONFIG_RSBAC_DAZ_PERSIST is not set CONFIG_RSBAC_DAZ_DEV_MAJOR=250 CONFIG_RSBAC_CAP=y CONFIG_RSBAC_CAP_PROC_HIDE=y CONFIG_RSBAC_CAP_AUTH_PROT=y CONFIG_RSBAC_CAP_LOG_MISSING=y CONFIG_RSBAC_JAIL=y CONFIG_RSBAC_JAIL_NET_ADJUST=y CONFIG_RSBAC_JAIL_NET_DEV_PROT=y CONFIG_RSBAC_JAIL_NR_P_LISTS=4 CONFIG_RSBAC_JAIL_LOG_MISSING=y CONFIG_RSBAC_RES=y CONFIG_RSBAC_FF=y CONFIG_RSBAC_FF_AUTH_PROT=y CONFIG_RSBAC_FF_UM_PROT=y CONFIG_RSBAC_FF_GEN_PROT=y # CONFIG_RSBAC_PM is not set CONFIG_RSBAC_SOFTMODE=y # CONFIG_RSBAC_SOFTMODE_SYSRQ is not set CONFIG_RSBAC_SOFTMODE_IND=y CONFIG_RSBAC_SWITCH=y CONFIG_RSBAC_SWITCH_ON=y CONFIG_RSBAC_SWITCH_REG=y CONFIG_RSBAC_SWITCH_AUTH=y CONFIG_RSBAC_SWITCH_RC=y CONFIG_RSBAC_SWITCH_ACL=y CONFIG_RSBAC_SWITCH_DAZ=y CONFIG_RSBAC_SWITCH_CAP=y CONFIG_RSBAC_SWITCH_JAIL=y CONFIG_RSBAC_SWITCH_RES=y CONFIG_RSBAC_SWITCH_FF=y CONFIG_RSBAC_IND_LOG=y CONFIG_RSBAC_IND_USER_LOG=y CONFIG_RSBAC_IND_PROG_LOG=y CONFIG_RSBAC_LOG_PROGRAM_FILE=y CONFIG_RSBAC_LOG_FULL_PATH=y CONFIG_RSBAC_MAX_PATH_LEN=512 # CONFIG_RSBAC_LOG_PSEUDO is not set CONFIG_RSBAC_SYSLOG_RATE=y CONFIG_RSBAC_SYSLOG_RATE_DEF=1000 CONFIG_RSBAC_RMSG=y CONFIG_RSBAC_RMSG_MAXENTRIES=200 CONFIG_RSBAC_RMSG_NOSYSLOG=y CONFIG_RSBAC_LOG_REMOTE=y # CONFIG_RSBAC_LOG_REMOTE_TCP is not set CONFIG_RSBAC_LOG_REMOTE_MAXENTRIES=200 CONFIG_RSBAC_LOG_INTERVAL=100 CONFIG_RSBAC_LOG_LOCAL_ADDR="0.0.0.0" CONFIG_RSBAC_LOG_LOCAL_PORT=0 CONFIG_RSBAC_LOG_REMOTE_ADDR="127.0.0.1" CONFIG_RSBAC_LOG_REMOTE_PORT=514 # CONFIG_RSBAC_SYM_REDIR is not set # CONFIG_RSBAC_ALLOW_DAC_DISABLE is not set # Other RSBAC options CONFIG_RSBAC_SECDEL=y CONFIG_RSBAC_RW=y CONFIG_RSBAC_IPC_SEM=y CONFIG_RSBAC_DAC_OWNER=y CONFIG_RSBAC_DAC_GROUP=y # CONFIG_RSBAC_PROC_HIDE is not set # CONFIG_RSBAC_FSOBJ_HIDE is not set CONFIG_RSBAC_FREEZE=y CONFIG_RSBAC_FREEZE_UM=y # CONFIG_RSBAC_SYSLOG is not set CONFIG_RSBAC_IOCTL=y CONFIG_RSBAC_USER_CHOWN=y # CONFIG_RSBAC_DAT_VISIBLE is not set # CONFIG_RSBAC_NO_DECISION_ON_NETMOUNT is not set # CONFIG_RSBAC_ENFORCE_CLOSE is not set # CONFIG_RSBAC_USER_MOD_IOPERM is not set CONFIG_RSBAC_FAKE_ROOT_UID=y CONFIG_RSBAC_XSTATS=y